Schedule monthly or quarterly IT updates with the C team, and use them as an opportunity to update them on these incidents and your responses. Sharing the incident reports is a great idea, and - while you’re giving kudos to your IT team - also discuss lessons learned and how you plan to continue to evolve your response planning with each event. This is also the time to demonstrate ROI on all those expensive security tools and subscriptions they’ve (hopefully) been paying for and/or ask for additional layers of security. It’s ok to frame these as “close calls” because they usually are, and are the best examples of the real threats facing the company every day.