Governance Surveys
Directorship Magazine
2025 Public Company Board Practices Oversight Survey
Data Pack: Cybersecurity
Which of the following cyber-risk oversight practices has the board performed over the past 12 months?
|
Cyber-Risk Oversight Practices |
Value |
|
Reviewed the company’s current approach to protecting its most critical data assets |
76.54% |
|
Reviewed the most significant cyber threats |
73.46% |
|
Reviewed the company’s cyberbreach response plan |
70.99% |
|
Assessed risks associated with third-party vendors or suppliers |
61.11% |
|
Assigned clearly defined roles to its standing committees with regard to cyber-risk oversight |
42.59% |
|
Participated in a test of the company’s response plan |
32.72% |
|
Assigned clearly defined roles to the full board with regard to cyber-risk oversight |
29.01% |
|
Considered adding a standing committee focused on cyber-risk oversight |
9.26% |
|
|
n=162 |
This table comes from the Cybersecurity section of the 2025 NACD Public Company Board Practices and Oversight Survey.
Registration Now Open for
NACD Directors Summit™ 2026
Register Early and Save $2,000
October 11-14, 2026
The Gaylord National Harbor | Washington, DC Area