CISO’s Guide to Explaining China’s Threats to the Board

Navigating Geopolitical, Economic, and Cybersecurity Risks in the Face of China’s Expanding Global Influence.

Over the past seven years of hosting the CyberHub Podcast, I’ve often discussed the threat China poses to Western businesses. More specifically, I’ve examined how best to measure and communicate this risk.

On one hand, there’s China’s challenging business environment, along with substantial intellectual property and data security concerns. On the other, one can’t easily overlook a market of 1.3 billion people.

As CISOs, we must thoroughly evaluate these conflicting realities—risk versus reward—and clearly convey them to executive teams so they can make well-informed strategic decisions.

Executive Summary

China’s unique fusion of state, business, and cybersecurity laws poses a complex and evolving threat to multinational organizations. The Chinese Communist Party (CCP) exerts influence over state-owned enterprises (SOEs) and private corporations alike—often compelling them to align with state intelligence and geopolitical objectives.