Free tool
Board Security Update Builder
Boards don't need every number you track. They need to know where things stand, what's changing, and what you need from them. Fill in your posture, top risks, and a handful of metrics, and get a one-page update the board will actually read.
🔒 Everything you type stays in this browser — nothing is uploaded. Back up to a file to keep a copy or move it to another computer.
Tips for writing to a board
- Lead with business impact. Say what a risk could do to operations, customers, or revenue, not which technology is involved.
- Show trends, not just numbers. "Up from 88% to 96%" tells a story; "96%" on its own doesn't.
- Pick 3–5 metrics. Choose the ones tied to your biggest risks and keep them the same each quarter so the board can track progress.
- Be honest about Amber and Red. Boards trust updates that name problems along with the plan to fix them.
- Make clear asks. If you need a decision, budget, or support, say exactly what, how much, and by when.
- Skip the jargon. If a term needs explaining, replace it with plain language.
Your board brief
Tired of assembling this by hand every quarter? AffinityOne tracks posture, findings, and remediation so the numbers are always current.
Get early access
How the metrics are scored
- Trend compares the current value with the previous one. For metrics where lower is better (like phishing click rate), a drop counts as improving.
- Status compares the current value with your target: Met if it reaches the target, Close if it's within 10% of the target, and Not met otherwise. A target of zero is only met at zero.
- Your overall posture rating (Green, Amber, Red) is your own judgment — the tool doesn't calculate it, because it should reflect context the numbers can't capture.
The metric library is a starting point, not a standard. Choose metrics that match your biggest risks, and set targets that fit your organization.