Some CIOs write and publish IT security warnings to company intranets. Others have been known to compile threat statistics into chart form and disseminate them at management meetings. These methods, however, often fail to bridge the communication gap; many corporate managers are not technical enough to understand what IT threat metrics mean or what action they should take.