2025 Public Company Board Practices Oversight Survey

Data Pack: Cybersecurity

07/28/2025

 

Which of the following cyber-risk oversight practices has the board performed over the past 12 months in preparation for a potential cybersecurity incident?

 

Cyber-Risk Oversight Practices

Value

Discussed the material, financial implications of a cybersecurity incident

76.58%

Reviewed the scope of the organization's cyber insurance coverage in the case of an incident

68.99%

Assessed D&O insurance policies for coverage of directors in the event of a cybersecurity incident

62.03%

Discussed the legal implications of a cybersecurity incident

58.86%

Evaluated the cybersecurity consequences of major strategic decisions

46.20%

 

n=158

 

This table comes from the Cybersecurity section of the 2025 NACD Public Company Board Practices and Oversight Survey.