{"type":"rich","version":"1.0","provider_name":"Transistor","provider_url":"https://transistor.fm","author_name":"ADAPT Insider","title":"Cyber investment is won before it reaches the board, says Orica Australia’s CISO","html":"","width":"100%","height":180,"duration":751,"description":"Boards need enough cyber detail to judge exposure, understand whether key controls are working, and decide where intervention or investment is required.\nCyber lands better when it is framed around governance, business risk, and investment choices rather than technical complexity.\nJamie Rossato, CISO at Orica Australia, shares a practical view on how security leaders build alignment with boards and executives by connecting cyber outcomes to risk appetite, operational priorities, and the cost of leaving gaps unresolved.\n \nKey takeaways:\nEffective board engagement depends on clarity, brevity and aligning cyber discussions to fiduciary responsibility and risk appetite.\nInvestment decisions are won at the executive layer, where operational ownership and funding decisions are shaped.\nA threat-led approach strengthens both security posture and compliance outcomes, making cyber spend easier to justify.\n \nBoard engagement demands clarity, not complexity\n\nCommunicating with boards requires direct, concise messaging focused on controls, risks and outcomes, not technical detail.\nBoards operate under time pressure and broad accountability, so cyber leaders must translate security into governance, risk and fiduciary impact.\nJamie emphasises avoiding overly dense materials, instead focusing on whether controls are effective, aligned to risk appetite, and what actions are in place to address gaps.\n \nExecutive alignment is where investment is won\n\nCyber funding conversations are secured with executive management before reaching the board.\nExecutives own implementation and operational risk, making them critical partners in shaping, supporting and advocating for cyber investment.\nJamie notes that by demonstrating control effectiveness and value for money, leaders guide executives to recognise unaddressed risks, naturally building the case for further investment.\n \nA threat-led strategy outperforms compliance-first approaches\n\nFocusing on real threats ensures security measures are...","thumbnail_url":"https://img.transistorcdn.com/t0Jtrt9eZN4kwrPnSzLt-aLKB9f-tVVg1JGt9pql9t4/rs:fill:0:0:1/w:400/h:400/q:60/mb:500000/aHR0cHM6Ly9pbWct/dXBsb2FkLXByb2R1/Y3Rpb24udHJhbnNp/c3Rvci5mbS84ODM3/NGVhYmU2ZjljNWIx/NTliY2NlMTAzZDRl/NGNmOS5qcGc.webp","thumbnail_width":300,"thumbnail_height":300}