How to communicate more effectively with board members to improve cyber security decision making.