Keep to 15-20 minutes maximum (boards have limited attention spans) - Anticipate questions: "How do we compare to our peers?" "Could this really happen to us?" "What would it cost if we were breached?" - Have a brief demo ready if requested (but do not lead with it --- board members are not impresse