2025 Private Company Board Practices Oversight Survey

Data Pack: Cybersecurity

08/25/2025

 

Which of the following cyber-risk oversight practices has the board performed over the past 12 months in preparation for a potential cybersecurity incident?

 

Cyber-Risk Oversight Practices

Value

Discussed the material, financial implications of a cybersecurity incident

71.60%

Reviewed the scope of the organization's cyber insurance coverage in the case of an incident

65.43%

Assessed D&O insurance policies for coverage of directors in the event of a cybersecurity incident

51.85%

Discussed the legal implications of a cybersecurity incident

48.15%

Evaluated the cybersecurity consequences of major strategic decisions

43.21%

 

n=81

 

This table comes from the Cybersecurity section of the 2025 NACD Private Company Board Practices and Oversight Survey.