Briefing RoomNew on Ultra

Cyber risk, taught from your numbers.

Short classes for directors and executives, built on your own expected losses, recovery tests and plan. Five minutes at a time, in the car or at the desk.

Get started
TRAILER · CORE I · RANSOMWARE01 / 05
$4.2MWhat ransomware would cost you in an average year.FROM YOUR RISK REGISTER
26classes · 7 core, 19 electives
5 minthe length of a lesson
3ways to take it: watch, listen, read
1signed record, ready for your auditor
THE CORE

Seven classes. Each opens on your number.

Every director takes the same seven, about thirty minutes each in five-minute lessons. What changes is the opening: each class starts on the number that matters for your company, pulled from your risk register, rehearsals and controls. When that number moves, the class moves with it.

$4.2M
CORE I · 31 MINRansomware: Deciding Under Pressure$1.7M over appetite
6.1%
CORE II · 28 MINThe $100K EmailClick rate above your 4% limit
61h
CORE III · 33 MINThe First 72 HoursRestore took 61h vs 24h
2 of 6
CORE IV · 30 MINYour Vendors’ Vendors2 critical suppliers unassessed
92%
CORE V · 29 MINIdentity Is the Perimeter8% of staff without MFA
3 of 7
CORE VI · 30 MINWhat We Hold, and WhyRetention covers 3 of 7 data types
3
CORE VII · 31 MINAgents with the Keys3 suppliers run AI on your data

Plus 19 electives for the boardroom, technical leaders and executive roles, including Reading a Security Budget, Cyber Insurance: Read the Fine Print, SEC, NIS2 & Director Liability and tracks written for the CFO, General Counsel and COO.

HOW LONG HAVE YOU GOT?

Fits the time you actually have.

Tell it how long you’ve got. Briefing Room builds a queue from your next meeting’s agenda, starting with what you’re most likely to be asked, and never runs over. Driving gives you the audio editions only.

15 minFOR NOV 18 · 4 ITEMS
♪
If you’re asked: the file-transfer breachNews answer · likely on Nov 18
0:30
▶
Your exposure: ransomwareCore I · agenda item 4
4:10
▶
To pay or not to payCore I · agenda item 4
4:05
▶
The funding line, in plain termsReading a Security Budget · item 6
6:00

Watch. Listen. Read.

Every lesson comes three ways, and you can switch mid-lesson without losing your place. Your numbers appear on screen at the moment the narrator says them, so watching and listening never disagree.

Five-minute lessons, narrated, with your numbers on screen.
LESSON 4 · RECOVERY IS A BUSINESS DECISION61h▶“Your last restore took sixty-one hours. The business set twenty-four.”
LISTENING · CORE I · LESSON 4
1:424:00
READ · 4 MINRecovery is a business decisionYour last rehearsal brought systems back in 61 hours. The target the business set was 24. The gap isn’t technical. It comes down to what a day of downtime costs, and who decided that twenty-four hours was acceptable…

Not their company. Yours.

Most board security training teaches directors what a phishing email looks like. Directors need something different. They need to understand what a ransomware event would actually do to this company, how long the business can be down before it stops being a bad week and starts being a bad year, and which of management’s choices make that number bigger or smaller.

The same lesson, taught from your numbers, gives a director something to ask at the next meeting.

Ransomware would cost you $4.2M this year.
Your last restore took 61 hours. The target was 24.
6.1% of your staff clicked the last test.
WHEN IT’S IN THE NEWS

The answer, before the question.

When another company’s breach makes the news, someone will ask whether it could happen here. Briefing Room checks the story against your suppliers, systems and risks, and drafts a thirty-second answer. Your vCISO checks every number before you see it. Stories that don’t touch your company are never sent.

OCT 23 · A PAYMENTS FIRM BREACHED THROUGH ITS FILE-TRANSFER SUPPLIER“We use one file-transfer supplier, and it isn’t the affected product. We model this kind of breach at $2.9M a year, inside our appetite.”
▶ Hear it · 0:28✓ Reviewed by your vCISO · Oct 24
FOR THE RECORD

Every class, on the record.

A class ends with a short check that has to be passed and a signed attestation. The record shows when, the result, the risks it covered and the obligations it counts toward. Completions go to your awareness control as evidence, and Board drafts the oversight paragraph for your annual report.

The board training record: seven directors against seven core classes, each completion signed.

Your board has been updated. Has it been educated?

Get courses tailored to your organization’s risks, budget and strategic goals so you’re not just talking about phishing tests—you’re demonstrating why they matter.

COMMON QUESTIONS

Briefing Room questions

  • Who is Briefing Room for?

    Directors, executives and the technical leaders who brief them. Every director takes the same seven core classes, and nineteen electives cover the boardroom, technical leaders, and the CFO, General Counsel and COO.

  • How is it different from security awareness training?

    Awareness training teaches everyone to spot a phishing email. Briefing Room teaches directors what a cyber event would do to this company, using its own expected losses, recovery tests, suppliers and plan, so they leave with something to ask at the next meeting.

  • Where do the numbers come from?

    From what is already in vCISO Lite: your risk register, recovery rehearsals and controls. When a number changes, the class changes with it. If a class has no matching number for your company, it says so instead of filling the gap with an industry average.

  • Does it count toward board training obligations?

    Each class ends with a check that has to be passed and a signed attestation. The training record shows who completed what and when, the risks covered and the obligations it counts toward, and it exports as an evidence pack for the framework you choose.

  • How long does it take?

    Each core class runs about thirty minutes, in five-minute lessons you can watch, listen to or read. Tell Briefing Room how long you have and it builds a queue that fits. Once a director has the full class on record, a ten-minute Essentials version opens for refreshers.

  • Which plans include Briefing Room?

    Ultra and Enterprise. It's under Reporting, in the Briefing Room tab. Ask APRI inside a lesson and rehearsals are on Enterprise.

  • Who checks the answers to news stories?

    A vCISO approves every number in a news answer before anyone sees it. Stories that don't touch your company are never sent.

Fifteen minutes a week. Ready for the room.