80 percent of boards discuss cybersecurity at nearly every board meeting, according to a recent survey. 26 percent of board members admit to “minimal or no knowledge” about cybersecurity. CISOs should focus on easy-to-understand metrics that show how effective the company is at managing security, CISO says. CISO’s job is to facilitate the awareness of risk and educate leadership about what risk they are willing to accept, says Paul Calatayud, CTO and CISO at Surescripts.”]