Locking the doors may protect the store, but it can also stop customers from coming in. This is the crux of the challenge facing CISOs as they try to mitigate risk while simultaneously driving productivity and revenue. Effective CISOs need to not only successfully develop high-level risk valuation and management strategies, but also communicate business opportunities through a holistic risk lens that encompasses the company’s products, services, and greater competitive landscape. This interactive discussion focuses on strategies for creating flexible controls that protect the organization, developing agreed-upon standards of acceptable risk, and providing clear business cases that connect business profitability to risk reduction programs.