Leverage current events to illustrate hidden consequences.
Instead of beginning with, I need tool X, begin with relatable cyber events happening in the news- and work backward to connect the dots from threat to risk to incident to impact.
Center your conversation around impact reduction.
Put a financial estimate on each priority cyber scenario that matters to the organization. This is an easier-to-understand risk language. Cyber risk communicated in dollars and cents empowers budget holders to respond to your requests more positively.
Build a steering committee.
When business leaders realize the collateral advantages of a cybersecurity investment, they are more likely to support and advocate for it.