Resource Center

Image
pexels-fauxels-3183197.jpg
Guidelines
Update: 11/07/2025

Reporting Cyber Risk to Boards

Boards have a statutory duty to have proper risk oversight. Cyber risk constitutes by now a critical, potentially material, business risk. However, most Boards are ill-equipped to deal with cyber risks. They consider cyber as too technical, they merely approve resources and delegate the risk.

Link to Reporting Cyber Risk to Boards