Watch this video on YouTube
What is the most effective way to communicate information security risk to senior management?