The most relevant information for an information security manager to communicate to business units is risk ownership. Clearly defining risk ownership ensures that business units understand their responsibilities regarding information security risks, which is crucial for effective risk management and accountability within the organization.
While vulnerability assessments, threat intelligence reports, and business impact analyses are important, communicating risk ownership directly involves business units in the security process, helping to foster a culture of accountability and proactive risk management.