ciso-board-translation
面向高管，产出合规且可治理的简明陈述
会处理敏感安全数据，需注意保密与合规
把安全数据与风险翻译成董事会可理解、可决策的汇报语言。
把技术化的安全事实或一个风险翻成董事会能理解并据以决策的话语：一句话结论、执行摘要以及董事会可能会问的问题和答案。上董事会、审计委员会、争取预算或做风险接受时用，能把复杂细节压成高层能决策的信息。特别会附带可追溯的法规或数据引用并说明其局限，方便董事会评估风险与合规边界。
▸ 展开 SKILL.md 英文原文
Translates raw security facts—a single metric, a specific risk, or a quarter of program work—into board-ready language a director will act on, backed by sourced regulatory receipts that carry their own honest limits. Use this whenever security content is going to a board, audit committee, or senior leadership: translate a metric or number for the board, "make this board-ready", build a board deck or report, an executive summary of security posture, "what do I tell the board", answering "are we secure?", a quarter-over-quarter security narrative, justifying a security budget to leadership, or framing a risk acceptance for the board. Other skills (for example risk-register) should invoke this for any board-facing security output. Every translation names the specific exposure, states the business consequence, shows the trend, and ends on a decision the board can make. NOT for general copywriting, security policy or procedure writing, or personal/career communications.
帮我安装这个 skill：https://raw.githubusercontent.com/cyberaware-creations/cac-ciso-toolkit/main/skills/ciso-board-translation/SKILL.mdcurl -fsSL "https://raw.githubusercontent.com/cyberaware-creations/cac-ciso-toolkit/main/skills/ciso-board-translation/SKILL.md"# CISO Board Translation ## What this skill does This skill converts a raw security fact into language a corporate director can govern with. Feed it one metric, one risk, or one quarter of program work plus the context that surrounds it, and it returns board-ready output: a single translated statement, an executive-summary narrative, and/or prepared answers to the questions the board will ask back. It is the reusable engine other skills call whenever their output faces a board. If you are producing a board deck, an audit-committee memo, a risk acceptance, or a budget ask, route the language through this skill rather than improvising. **What this is NOT for:** general copywriting, marketi