Making the Non-Technical Feel Technical – A Recipe for Success
Whether you are already a cybersecurity leader or aspiring to be one someday, you need to be an effective salesperson and communicator if not already (especially at the board and executive level) to be successful in your role. You need to be able to connect with your audience no matter whether they are very technical or not, or somewhere in between. You need to be able to speak with the audience using language and terms they understand.
While we may use a variety of security vendors, tools, and technical acronyms daily as cyber leaders to communicate with our teams and others in technical roles, most people, including company executives and boards do not. For many of them, it might seem like you are speaking a foreign language where they are only catching part of what you are saying, but getting somewhat distracted or lost when they hear the different terms or technologies mentioned that they have never heard of. You need to be conscientious of this and understand the audience with whom you are communicating.
When selling and advocating for cybersecurity in meetings, you need to shift your communication style to align to the least technical people in the room. While there may be executives or board members that have a more technical background, there are usually others that do not, and those others may be much of your audience. Those with more technical background may want to hear more technical details and want to dive deeper on what you are sharing, but do not fall for that trap.
Instead, recognize the importance of what the more technical people are asking or wanting to discuss and suggest deferring to separate a meeting or discussion where you can go into more details with just them. If you discuss those topics during a meeting with those that are not interested in all those technical details or those that don’t really understand the technical details, those individuals will likely not view your meeting as having gone well. It’s better to recognize and avoid going on about technical details with an audience that in large part is not interested.
A mentor of mine once told me in reference to plumbing that some people want to know how the tap water in their house that comes out of their faucets gets sourced, filtered, cleaned, and transported through their pipes to the various faucets in their house. While others just want to know when they turn on the faucets in their house that the hot and cold water comes out as expected. It is the same with audiences. Some people want the plumbing details to understand how everything works and others do not.
Contrary to what certain others may think or have heard, your biggest asset is not being the smartest or most technical cybersecurity person in the room. You obviously need to have good technical skills, experience, and be capable and knowledgeable in your role or you likely wouldn’t be in the role. Those are great attributes that are important, but if you speak above others’ understanding of cybersecurity and technology or go into too many details on technical items, you may end up intimidating or scaring others into going along with what you are selling because they may not fully understand what’s being presented and are afraid not to go along with it.
I’ve found the use of easily relatable and understandable analogies and stories can be very effective tools to leverage in meetings with various technical skill levels. If you can get your message across in a way that’s engaging and easy to digest, you will likely do a much better job connecting and interacting with your meeting participants. They will be more likely to ask questions or share feedback.
At the end of the day, if those you are trying to educate or sell your proposals or ideas, do not understand or are bored with what you are discussing or why they should care, then they will typically be less interested and less supportive. They will generally see you as having less business acumen and more of just the techie person who doesn’t really understand the business.
However, if you’ve made a meaningful connection on the topics and have given the audience information in a way they can make informed business decisions and provide credible challenges to what you presented where needed, then you will likely be more successful in garnering the support and results you desire. The executives and board members will also likely see you more as someone with strong business acumen, who understands the business and what’s important, and aligns their proposals and recommendations to those items. This will ultimately make it easier for these leaders to see why they should support or approve what you are presenting to them.
I want to share an example that has worked for me to demonstrate how to do this. When building and implementing cybersecurity protections, we come across hundreds if not thousands of vendors, tools, processes, and services that we may consider creating a defense-in-depth, layers security approach. However, I’ve found if we can bucketize these items into easier to understand categories, that executives and board members tend to understand these items better and why they are important.
I will talk to my audience about protecting their home and when protecting their home that they want to do three main things. First, they want to do what they can to keep the bad guys from getting into their home. In other words, protect the front door. Second, if the bad guys do get into their home, they want to make sure the bad guys don’t get away with anything significant. They want to limit the damage and impacts. Third, if the bad guys get in their home, they want to make sure they can detect those bad guys right away and kick them out of their home. I know this creates a very simple view, but it’s highly effective when discussing with less technical audiences.
In today’s digital age, cybersecurity is more important than ever. As a cybersecurity leader, effectively communicating with non-technical leaders is crucial for success. Scott Hennon, a seasoned CISO and former CIO in the financial services industry, emphasizes the need to simplify complex technical concepts to facilitate discussions with non-technical stakeholders.
Scott Hennon’s extensive background in IT, including areas such as Digital Transformation, Cybersecurity, Privacy, and Regulatory Compliance, equips him with the expertise to bridge the gap between technical and non-technical individuals. By translating technical jargon into easily understandable analogies, Scott enables non-technical leaders to grasp the importance of cybersecurity strategies and initiatives.
One key aspect highlighted by Scott is the need to plan for potential security breaches, even with multiple layers of protection in place. In a scenario where “bad guys” manage to infiltrate a system, having measures in place to mitigate the damage and swiftly remove the threat is essential. This proactive approach to cybersecurity is vital in safeguarding sensitive data and minimizing the impact of security incidents.
Effective communication with non-technical leaders involves not only conveying the importance of cybersecurity measures but also securing buy-in, budget allocation, and ongoing support. By engaging in discussions that resonate with non-technical individuals, cybersecurity leaders can build trust, demonstrate value, and ensure the sustainability of cybersecurity initiatives within an organization.
Scott’s ability to simplify complex technical concepts and facilitate discussions with non-technical leaders underscores the importance of effective communication in the field of cybersecurity. By developing the skill of translating technical details into relatable scenarios, cybersecurity professionals can enhance collaboration, secure resources, and drive the successful implementation of cybersecurity strategies.
For more insights from Scott Hennon and to connect with him online, you can reach out to him via email at [email protected] or visit his LinkedIn profile at https://www.linkedin.com/in/scotthennon/. Scott’s entrepreneurial spirit, expertise in IT, and talent for simplifying technical concepts make him a valuable resource for organizations looking to enhance their cybersecurity posture and engage with non-technical stakeholders effectively.
