LibraryScenariosWhy security leaders exaggerate threats to get resources
Scenario

Why security leaders exaggerate threats to get resources

My CISO job requires me to present risk assessments to the board but I have started inflating threat levels because it is the only way to get budget approval for basic security measures.

Aurelius
Online
The coach is replying

More people experience this than they realize.

What we've seen

You exaggerate the threats because it's the only way to get the security budget you actually need.

Ideas that help explain it
Worth thinking about

“Where Are You with Technology — Cybersecurity Practice?”

If this sounds familiar, the Library can help you find the bigger picture.