A CTO at a Series B company recently showed me his board deck. Twelve slides of sprint velocity charts, deployment frequency graphs, and a Jira burndown. He was proud of the detail. The board had told him they "didn't understand the technology updates" and wanted more clarity.
They didn't want more detail. They wanted different information entirely.
The Board's Three Questions
Every board member, regardless of technical background, is asking three things about technology:
Is it working? Are we building the right things, and are those things generating business value? Not "did we close 47 tickets" — but "did the features we shipped move the metrics the business cares about?"
Is it safe? Are we exposed to security, compliance, or operational risks that could damage the business? Not a CVSS score dashboard — but "here's our risk posture, here's what we're doing about the top risks, and here's what would happen if we got breached today."
Is it efficient? Are we spending the right amount on technology, and are we getting proportional value? Not a cloud cost breakdown by service — but "here's our technology cost as a percentage of revenue, here's how that compares to industry benchmarks, and here's where we're investing for future leverage."
The Four-Section Framework
I structure every board technology update with four sections. One page each. No more.
1. Business Outcomes
Lead with what technology delivered this quarter in business terms. Not features shipped — outcomes achieved.
Instead of "launched new checkout flow," say "new checkout flow reduced cart abandonment by 18%, contributing $340K in recovered quarterly revenue." Instead of "migrated to microservices," say "platform modernization reduced average deployment time from 2 weeks to 2 days, enabling faster response to market changes."
If you can't connect a technology investment to a business outcome, either the connection exists and you haven't articulated it, or the investment wasn't justified. Both are worth knowing.
2. Risk Posture
Boards are increasingly focused on technology risk — especially cybersecurity, data privacy, and operational resilience. Report on:
Security. Number and severity of incidents (or lack thereof), status of compliance certifications (SOC 2, HIPAA, etc.), results of any penetration testing or security audits, and any changes to the threat landscape that affect your business.
Technical debt. Not a list of refactoring tickets — a trajectory. Is technical debt increasing, stable, or decreasing? What's the business impact? "Technical debt in our billing system is causing an estimated 4 hours of engineering time per week in workarounds. We've allocated 20% of Q2 capacity to address the top three items."
Operational reliability. Uptime percentage, number of customer-impacting incidents, mean time to recovery. These are the technology metrics boards actually understand because they directly correlate with customer experience and revenue.
3. Investment Efficiency
Show the board that technology spending is disciplined and benchmarked.
Technology cost as a percentage of revenue. This single metric contextualizes everything. SaaS companies typically spend 20-30% of revenue on R&D. If you're at 40%, you need a story about why (early stage, platform investment, etc.). If you're at 15%, you might be underinvesting.
Team utilization. Not "how many hours did people work" — but what percentage of engineering capacity went to new features vs. maintenance vs. unplanned work. A healthy ratio is roughly 60% new value / 20% maintenance / 20% unplanned. If unplanned work exceeds 30%, the board should know because it means your systems are fragile.
Vendor spend trends. Top 5 vendor costs, quarter-over-quarter trend, and any upcoming renewals that represent negotiation opportunities or risks.
4. Strategic Bets
End with forward-looking initiatives that connect technology to business strategy. These are the slides where you earn trust and budget.
"We're evaluating AI-assisted customer support that could reduce Tier 1 ticket volume by 40%. We'll run a pilot in Q2 with 10% of support traffic. Success criteria: equivalent customer satisfaction scores with 30% fewer human escalations."
This section should have 2-3 items maximum. Each should include: what you're doing, why it matters to the business, the timeline, and how you'll know if it worked.
What to Leave Out
Sprint velocity and story points. These are internal engineering management tools. They're meaningless to anyone outside the engineering team and actively confusing to board members who will try to interpret them as productivity metrics.
Deployment frequency and DORA metrics. These matter for engineering leadership. They don't belong in a board deck unless you're specifically asked. If a board member asks "how fast can you ship?" the answer should be in business terms: "We can go from concept to production in X weeks for a typical feature."
Technology stack details. Nobody on the board needs to know you're migrating from PostgreSQL to CockroachDB unless there's a business reason (scalability, cost, compliance). Lead with the outcome, footnote the technology.
Jira screenshots. I cannot stress this enough. Never put Jira in a board deck.
The Pre-Read Strategy
For boards that meet quarterly, I recommend sending a one-page written summary 48 hours before the meeting. This lets board members digest the information, formulate questions, and come to the meeting ready for discussion rather than absorption.
The meeting itself then becomes a conversation about strategy and decisions, not a presentation. This is where you want to be — the board asking "should we double down on the AI initiative?" rather than "wait, what's a microservice?"
Related: Making Your Tech Roadmap Visible to Business, Quantifying Risk for Executives, Technology Budget Benchmarks