Cyber Risk & Corporate Governance

Concluded in 2021, this initiative brought together public and private leaders, at the board and C-suite, to equip them with the capabilities necessary to govern these risks effectively to protect business assets, investments and the company’s reputation from the impact of cyberattacks.

Our objectives

In order to best protect business assets and enhance the capability of enterprises to respond to cyber risk, this initiative defined key objectives:

Elevate the discussion around cybersecurity

To the highest strategic levels by enabling boards and C-suite executives.

Embed cyber resilience into organizations business models 

As a common practice in the business operating model.

Ensure effective communication across the board

Between operational and decision maker levels  ensuring better risk-informed prioritization of investments.

Our impact

We developed six consensus-based principles to equip leaders, at the board and C-suite, to protect business assets, investments and the company’s reputation from the impact of cyberattacks.

Developed six consensus principles for boards

Aid organizations protect their assets to maintain operational continuity, and build trust with stakeholders in an increasingly digital and interconnected world.

Fostered the adoption of the principles as a baseline

Enabled boards to implement governance practices boards and education on cyber risk management as part of the Harvard Law School, NACD and ISA.

Supported the alignment, collaboration and development  

Gatherer boards, senior leaders and boards members across industries globally to collaborate, create synergies and develop common practices.

Our insights

As a completed initiative, we succeeded defining best practices to incorporate cyber risk into business strategy, enabled boards to implement effective cyber risk governance practices, and updated implementation guidelines for the board principles for cyber resilience.

Principles for Board Governance of Cyber Risk

This paper is designed as a reference for corporate directors as they set their organization’s cybersecurity strategy and engage with stakeholders on the issue of cyber risk.

Advancing Cyber Resilience: Principles and Tools for Boards

This document provides the first in a continuing series of tools that leaders have called for in order to support their efforts at integrating cyber resilience into overall business strategy.