Director's Handbook
Cyber-Risk Oversight Principles
These six independently validated cyber-risk oversight principles provide directors with activities, success indicators and questions for boards to consider in their cyber risk oversight.
Governance Resources
Cybersecurity
Safeguard Your Organization with Strategic Cybersecurity Governance
Trending Oversight Topics
Governance Surveys
Directorship Magazine
Oversight That Protects Enterprise Value
Cyber-risk oversight is essential for protecting organizational value in a digitally enabled economy. Proactive and informed engagement helps boards align cybersecurity to business outcomes, mature cybersecurity capabilities, foster organizational resilience, and cultivate stakeholder confidence. Leverage NACD's oversight handbooks, boardroom tools, templates, and articles to strengthen your boardroom’s governance and exercise strategic cyber-risk oversight.
Featured Report
Director's Handbook on Cyber-Risk Oversight Fifth Edition
Written and produced by the Internet Security Alliance and NACD, this handbook provides boards with an independently validated framework built on six oversight principles along with fifteen boardroom tools with best practices to enable boards to address board-level cyber-risk oversight issues.
Key Resources
Curated insights and guidance on this topic.
Tools for Success
Practical resources designed to help boards turn insight into action.
-
Boardroom Tool
The Board’s Role in Ransomware Preparedness and Response
Structure oversight of ransomware preparedness and response, by focusing on risk governance, scenario planning, and decision-making under pressure.
-
Boardroom Tool
Board Discussion Guide on Adapting to Emerging Technologies
Gather cybersecurity-related questions the director should consider in discussion within the board, with management, and with other interlocutors regarding emerging technologies and their impact on the organization's strategy.
-
Boardroom Tool
Board Discussion Guide on Quantum Computing
Explore an overview of anticipated impacts and applications of quantum technologies, and collect suggested cybersecurity-related questions for board members to discuss with management as the technology matures and transitions into the marketplace.
-
Boardroom Tool
Discussion Guide for Board Decisions on AI
Review information to help successfully understand rapidly evolving AI capabilities, the risks and opportunities of AI investments, and provide the leadership, governance, and oversight that will enable the business to thirve in the age of AI.
-
Boardroom Tool
Overseeing Insider Threats and Human Risk Management
Understand the defintion of insider threat, the categories of insider incidents, types of insider threat actors and the board's responsibilities with specific actions they can perform to ensure executive management is adequately addressing insider threats.
-
Boardroom Tool
Board Oversight of Third-Party & Supply Chain Cyber Risk
Collect questions to ask to ensure that key components of third-party and supply chair risk management are being managed effectively.
Explore More Cybersecurity Content
Directorship® Picks
Magazine thought leadership and timely online exclusives to help boards stay ahead.
-
Online Exclusive
Why Boards Need Collective Cybersecurity Literacy
Rather than relying on one cybersecurity expert, boards should build a shared undertsanding of cyber risk to govern it effectively.
-
Online Exclusive
What Boards Should Know About Today’s Threat Actors
As cyber-risk demands board-level oversight, directors should recognize these hreat actors and potential impact of a cyberattack on operations.
-
Online Exclusive
Cybersecurity Oversight: The More Things Stay the Same, the More They Change
Public company disclosures reveal three shifts in cybersecurity oversight, including the adoption of maturity frameworks, tabletop exercises, and ongoing board education.
-
Online Exclusive
What Audit Committees Are Wrestling With
Discover what is top of mind for audit committees as companies prepare for 2026.
-
Online Exclusive
Overseeing Cyber Risk in a Fragmented Regulatory Environment
Learn more about steps boards can take to oversee cyber risk in a complex regulatory environment.
-
Online Exclusive
How to Leverage Cybersecurity for Long-Term Value Creation
Actions boards can take in order to turn cybersecurity into a catalyst for long term business success.
-
Online Exclusive
Why Boards Need to Add Strategic Resilience to the Agenda
Take a cross-functional approach to resilience to avoid crisis mode and enable growth during periods of disruption.
Final Days to Save $1,500 on NACD Directors Summit™
2026 Registration
Register by Thursday, April 30 to take advantage of this exclusive discounted pricing.
October 11-14, 2026
The Gaylord National Harbor | Washington, DC Area