2025 Private Company Board Practices Oversight Survey

Data Pack: Cybersecurity

08/25/2025

 

How important is it that your board improves in the following areas related to cyber-risk oversight?

 

Areas Related to Cyber-Risk Oversight

Not at all important

Slightly important

Moderately important

Very important

Extremely important

n

Alignment of compensation incentives with corporate cybersecurity objectives

32.94%

18.82%

27.06%

16.47%

4.71%

85

Quality of board-CISO relationship

15.48%

20.24%

23.81%

33.33%

7.14%

84

Board cybersecurity expertise

10.71%

15.48%

28.57%

34.52%

10.71%

84

Committee oversight responsibility

14.29%

11.90%

25.00%

35.71%

13.10%

85

Quality of cybersecurity education plans and access to outside expertise

9.30%

18.60%

24.42%

36.05%

11.63%

86

Linking cybersecurity to strategic priorities

9.41%

18.82%

20.00%

43.53%

8.24%

84

Acquiring metrics to accurately measure and assess cybersecurity

3.53%

15.29%

29.41%

41.18%

10.59%

85

Quality of management reporting

3.53%

15.29%

24.71%

37.65%

18.82%

85

 

This table comes from the Cybersecurity section of the 2025 NACD Private Company Board Practices and Oversight Survey.