<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->
---
name: implementing-security-communication-strategy
description: >-
  Design security communication strategies including stakeholder
  messaging, crisis communication plans, internal branding,
  cross-functional alignment, and narrative development.
domain: cybersecurity
subdomain: security-leadership
tags:
  - security-communication
  - stakeholder-management
  - crisis-communication
  - internal-branding
  - cross-functional
  - narrative-development
version: "1.0"
author: defconxt
license: AGPL-3.0
metadata:
  mitre-attack: []
---

# Implementing Security Communication Strategy

## Overview

Security communication strategy ensures messages reach the right
audiences with appropriate framing. Covers stakeholder mapping, message
tailoring, crisis communication, and cross-functional alignment.

## Prerequisites

| Requirement | Purpose |
|---|---|
| Stakeholder map | Audiences and their information needs |
| Communication channels | Email, Slack, intranet, town halls |
| Crisis playbook | Incident communication procedures |

## Key Concepts

### Stakeholder Communication Matrix

```python
stakeholder_matrix = {
    "board": {"frequency": "quarterly", "format": "executive_dashboard",
              "language": "business_risk_financial"},
    "c_suite": {"frequency": "monthly", "format": "risk_briefing",
                "language": "business_impact"},
    "engineering": {"frequency": "weekly", "format": "technical_bulletin",
                    "language": "technical"},
    "all_staff": {"frequency": "monthly", "format": "newsletter",
                  "language": "plain_accessible"},
}
```

## Workflow

1. **Map stakeholders** — Identify audiences and information needs
2. **Tailor messages** — Adapt language, depth, format per audience
3. **Build cadence** — Regular schedule per stakeholder group
4. **Create templates** — Standardize reports, alerts, briefings
5. **Plan crisis comms** — Pre-draft incident notification templates
6. **Measure engagement** — Track open rates, feedback, action taken
7. **Iterate strategy** — Quarterly review and adjustment

## Verification

| Check | Method |
|---|---|
| Workflow completed | All steps executed and documented |
| Output validated | Results match expected format and content |
| Quality assured | Peer review or automated validation passed |

## References

- [NIST Cybersecurity Framework](https://www.nist.gov/cyberframework)
- [MITRE ATT&CK](https://attack.mitre.org/)
