Do Better: Board-Level Accountability in Cybersecurity
summary
Boards must move from checkbox conversation to measurable oversight: require an audit‑committee cadence, materiality assessments and a documented incident playbook because proposed rules push toward 48‑hour disclosure windows. Expect tabletop exercises and anti‑phishing training for executives, simpler board briefs with deep details in appendices, and cross‑company sharing of best practices. Industry tools and certs (Diligent serves ~25,000 companies / 700,000 board users) support a pipeline for board cyber risk certification and real‑world readiness.
AI-written summary · about
chapters (9)
- 0:00Introduction and panel setup
- 4:23Regulation vs litigation drivers
- 9:47Effective board oversight focus
- 16:52Translating cyber risk for boards
- 22:57Preparation and training strategies
- 30:16Building cyber-aware boards
- 35:39Regulatory depth and board knowledge
- 40:38Governance and risk management
- 43:34Q&A with board members
related talks
22mThe CISO’s Guide to Securing a Board Seat
31mHow to Talk to a Board so the Board Will Talk Back
51mSEC Rules on Cybersecurity: Materiality, Preparedness and Board Oversight
28mThe Strategic CPO: Managing Risk and the Board
40mCybersecurity Metrics Development for Board and Risk Committee Reporting
28mStandard Classification: Birds & Buttons - Cyber Risk Success Criteria for Board ...
47mTechniques to Evolve Risk Governance and Comply with SEC Cybersecurity Rule
28mHow to Tell the Right Cyber-Story to Executives and Board Members