To be successful in presenting IT security to senior leadership, it’s important it is done in way that they can ingest, process, and understand; because ultimately, IT risk management decisions are business decisions, not technical decisions. And now much of this communication is happening via Zoom or Teams.This session will discuss approaches to present to individual business decision makers, understanding that each has his/her own goals, incentives, currency, and biases. We will discuss three simple concepts to be defined and agreed on by senior leadership to move forward: what does success look like?; what does failure look like?; how do we measure these? Please bring your questions on this topic!