CISO needs to make sure the board members know that he or she is a true enabler of the business. The first thing we need to realize about a board-level audience is that showing return on investment is key. Don’t let the board get the idea that their investment will make the company safe 100% of the company 100% safe. Never say I need “money” and always bring it back to the ROI, you’re headed for a home run. The CISO must be sure to be sure when presenting to the board when not leaving a lasting impression; presenting to a board will take practice.”]
Source: https://www.cuinfosecurity.com/blogs/demystifying-board-presentation-p-1366