A Strategic Cyber-Roadmap for the Board

The Director Notes report is based on interviews with five corporate board directors. There were five lessons learned: a board must tackle the topic of cybersecurity in a manner that is appropriate to its industry, footprint, geography, assets, and people; a board should have either a committee, cyber expert, or both, to oversee cybersecurity; the audit committee should not assume responsibility for cybersecurity oversight; every board should have a director who is cybersecurity savvy; and some board members should receive cybersecurity preparedness education and training.