2025 Private Company Board Practices Oversight Survey

Data Pack: Cybersecurity

08/25/2025

 

Which of the following cyber-risk oversight practices has the board performed over the past 12 months?

 

Cyber-Risk Oversight Practices

Value 

Reviewed the company’s current approach to protecting its most critical data assets

73.08%

Reviewed the most significant cyber threats

65.38%

Reviewed the company’s cyberbreach response plan

56.41%

Assessed risks associated with third-party vendors or suppliers

52.56%

Assigned clearly defined roles to its standing committees with regard to cyber-risk oversight

32.05%

Participated in a test of the company’s response plan

28.21%

Assigned clearly defined roles to the full board with regard to cyber-risk oversight

17.95%

Considered adding a standing committee focused on cyber-risk oversight

15.38%

 

n=78

 

This table comes from the Cybersecurity section of the 2025 NACD Private Company Board Practices and Oversight Survey.