MD3 Building blocks of cybersecurity communications

Question 1

Creating Clear and Specific Security Communications

Answer 1

When communicating security information to stakeholders, it’s important to be clear and specific. This will help stakeholders understand what’s happening and what actions may need to be taken.

Question 2

create clear and specific security communications, you can use the following tips:

Answer 2

To create clear and specific security communications, you can use the following tips:

Tell a story. Security stories typically have a beginning, middle, and end. They also include a conflict and a resolution. When telling a security story to stakeholders, be sure to include the following information:

• What is the security challenge?
• How does it impact the organization?
• What are the possible solutions to the issue?

Use data to support your story. Data can help you to make your security story more credible and persuasive. When using data, be sure to include the following information:

What are the key findings of your investigation?

• What are the potential risks and impacts of the security challenge?
• What are the benefits of the proposed solutions?

Communicate in a way that is easy to understand.
Avoid using jargon and technical terms that stakeholders may not understand. Instead, use clear and concise language that is easy to follow.