
Governance Surveys
Directorship Magazine
2025 Private Company Board Practices Oversight Survey
Data Pack: Cybersecurity
How important is it that your board improves in the following areas related to cyber-risk oversight?
Areas Related to Cyber-Risk Oversight |
Not at all important |
Slightly important |
Moderately important |
Very important |
Extremely important |
n |
Alignment of compensation incentives with corporate cybersecurity objectives |
32.94% |
18.82% |
27.06% |
16.47% |
4.71% |
85 |
Quality of board-CISO relationship |
15.48% |
20.24% |
23.81% |
33.33% |
7.14% |
84 |
Board cybersecurity expertise |
10.71% |
15.48% |
28.57% |
34.52% |
10.71% |
84 |
Committee oversight responsibility |
14.29% |
11.90% |
25.00% |
35.71% |
13.10% |
85 |
Quality of cybersecurity education plans and access to outside expertise |
9.30% |
18.60% |
24.42% |
36.05% |
11.63% |
86 |
Linking cybersecurity to strategic priorities |
9.41% |
18.82% |
20.00% |
43.53% |
8.24% |
84 |
Acquiring metrics to accurately measure and assess cybersecurity |
3.53% |
15.29% |
29.41% |
41.18% |
10.59% |
85 |
Quality of management reporting |
3.53% |
15.29% |
24.71% |
37.65% |
18.82% |
85 |
This table comes from the Cybersecurity section of the 2025 NACD Private Company Board Practices and Oversight Survey.