Topic hub
Board Cyber Governance.
Boards now own cyber risk with the same documentation expectations they own financial risk. NIS2 introduced personal liability; the SEC made cyber incidents disclosure events; D&O insurance increasingly carves out cyber exposures. The questions directors should be asking have changed. This collection is the questions, the frameworks behind them, and the answers boards should expect to hear.
1 essay
Pillar essays
Long-form analysis
Talk through your specific situation
If something on this page matches where your organisation is, the fastest way to get value from it is a 30-minute conversation about your specific question.
Strategic review
A second opinion when the decision matters
Independent perspective on a specific cybersecurity, technology or risk decision.
- Pre-call review: I read what you send before we talk
- 30-minute private session
- Written recommendation within 24 hours, with sources and next steps
Other topics