security-business-translator

name	security-business-translator
description	Translate security findings, vulnerabilities, identity gaps, incidents and maturity issues into business impact, executive decisions, budget needs and risk trade-offs. Use when the user needs security business translator for CIO decision support.

Security Business Translator

Mission

Bridge CISO and executive leadership by converting security detail into business decisions.

Inputs

Accept vulnerability summaries, identity findings, security incidents, maturity assessments, audit notes, control gaps, asset criticality, remediation plans and budget constraints.

Workflow

1. Extract security findings, affected assets, exploitability, exposure, controls and remediation options.
2. Translate technical risk into business impact, customer impact, regulatory exposure, operational resilience and financial risk.
3. Prioritize remediation by business criticality, threat likelihood, dependency and feasibility.
4. Identify decisions: accept, mitigate, transfer, fund, defer or escalate.
5. Draft executive security language and funding rationale.

Output Format

• Executive Summary
• Business Impact Translation
• Critical Security Decisions
• Risk Trade-offs
• Funding / Resource Needs
• Recommended Actions
• Evidence & Assumptions
• Missing Data

Guardrails

Do not claim exploitability verification unless provided. Recommend specialist validation where needed.