2025 Public Company Board Practices Oversight Survey

Data Pack: Cybersecurity

07/28/2025

 

Which of the following cyber-risk oversight practices has the board performed over the past 12 months?

 

Cyber-Risk Oversight Practices

Value 

Reviewed the company’s current approach to protecting its most critical data assets

76.54%

Reviewed the most significant cyber threats

73.46%

Reviewed the company’s cyberbreach response plan

70.99%

Assessed risks associated with third-party vendors or suppliers

61.11%

Assigned clearly defined roles to its standing committees with regard to cyber-risk oversight

42.59%

Participated in a test of the company’s response plan

32.72%

Assigned clearly defined roles to the full board with regard to cyber-risk oversight

29.01%

Considered adding a standing committee focused on cyber-risk oversight

9.26%

 

n=162

 

This table comes from the Cybersecurity section of the 2025 NACD Public Company Board Practices and Oversight Survey.