In an insightful fireside chat, Catherine Doyle, Managing Director of Microsoft Ireland and board member at Vhi, joined Network Chair, Eoin Mullally and iFHP members to discuss how cybersecurity leaders can engage boards more effectively. Drawing on her dual experience in technology leadership and corporate governance, she gave her thoughts on how to translate complex security issues into meaningful, business-focused discussions.

Communicating with Boards
Catherine explained that while boards increasingly understand the importance of technology, many still struggle to grasp technical language. She encouraged cybersecurity leaders to simplify their approach, replacing jargon with plain English and relatable explanations.

Catherine suggested that presenting cyber issues through stories, analogies and data visualisations makes them easier to understand and helps ensure messages resonate. Regular updates that link back to previous reports also build credibility and demonstrate ongoing progress in security posture.

Regulation, Threats and Leadership
The discussion turned to the growing regulatory burden and the personal accountability that comes with frameworks such as DORA and NIS2. Catherine noted that regulation can heighten anxiety among board members but that clarity and transparency in communication help mitigate that fear. Looking ahead, she warned that AI-enabled attacks and quantum computing will redefine the threat landscape, urging organisations to modernise systems well before 2030.

She emphasised that trust in leadership plays a vital role, noting that when boards see confident, capable leaders supported by clear evidence of effective defences, their confidence in the organisation’s security approach increases.

The Human Dimension
When asked about the human impact of cyber incidents, Catherine reflected on how breaches can take an emotional toll on employees and those leading recovery efforts. She reminded members that cybersecurity affects every part of an organisation, from systems and staff to leadership.

Catherine concluded that cybersecurity should never be seen purely as an expense but as a cornerstone of trust, reputation and operational resilience. A culture of shared responsibility, education and ongoing improvement is the key to long-term digital security.