Tag

Cyber Risk for Directors

Focuses on helping corporate board members and directors understand their cybersecurity oversight responsibilities. Posts address fiduciary duties related to cyber risk, governance frameworks, regulatory expectations, and how directors can ask the right questions to evaluate organizational security posture.

posts

Board-Level Cybersecurity Awareness

Board-Level Cybersecurity Awareness: A 2026 Guide

The SEC Changed Everything — Most Boards Still Haven't Caught Up In July 2023, the SEC adopted rules requiring public companies to disclose material cybersecurity incidents within four business days and to describe their board's oversight of cyber risk annually. Since then, I've reviewed dozens

Carl B. Johnson Aug 20, 2019 7 min read