<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->
---
name: building-executive-security-briefings
description: >-
  Build executive security briefings that translate technical risk into
  business impact, covering threat landscape summaries, risk quantification,
  board-ready metrics, and strategic security investment recommendations.
domain: cybersecurity
subdomain: security-awareness
tags:
  - executive-briefing
  - risk-communication
  - board-reporting
  - metrics
  - business-risk
version: "1.0"
author: defconxt
license: AGPL-3.0
metadata:
  mitre-attack: []
---

# Building Executive Security Briefings

## Overview

Executive security briefings require translating technical threats into business
risk language. This skill covers briefing design, risk quantification using FAIR
methodology, board-ready metric dashboards, strategic investment framing, and
communication techniques that drive informed decision-making at the C-suite level.

## Prerequisites

| Requirement | Install |
|---|---|
| Risk framework | FAIR, NIST RMF, or ISO 31000 |
| Visualization | PowerBI, Tableau, or executive dashboard tooling |
| Threat intel | Industry-specific threat landscape data |

## Commands

| Command | Description |
|---|---|
| `node agent.js briefing --audience board --quarter Q1-2026` | Generate board-level security briefing package |
| `node agent.js risk-quantify --scenario ransomware --method fair` | Quantify risk scenario using FAIR methodology |
| `node agent.js metrics --kpis mttd,mttr,patch-rate --period monthly` | Build executive KPI dashboard data |
| `node agent.js investment --budget 2M --priorities cloud,identity` | Generate security investment recommendation |

## Workflow

### Step 1 — Assess Current State

Evaluate existing capabilities and identify gaps before implementing changes.

```bash
# Run assessment with agent tooling
node agent.js briefing --audience board --quarter Q1-2026
```

### Step 2 — Plan and Design

Define objectives, scope, timeline, and success criteria.

```bash
# Plan implementation
node agent.js risk-quantify --scenario ransomware --method fair
```

### Step 3 — Execute and Deliver

Implement the planned activities and deliver outputs.

```bash
# Execute delivery
node agent.js metrics --kpis mttd,mttr,patch-rate --period monthly
```

### Step 4 — Measure and Optimize

Track results against success criteria and iterate.

```bash
# Measure results
node agent.js investment --budget 2M --priorities cloud,identity
```

## Verification

- [ ] Prerequisites validated and tools installed
- [ ] Assessment of current state completed
- [ ] Implementation plan documented and approved
- [ ] Execution completed per plan
- [ ] Results measured against defined KPIs
- [ ] Findings documented and next steps identified
