Conflict in the Crosshairs: Board Oversight Amid U.S.-Iran War
Archive
NACD Texas TriCities
Contact Us
Email:
programs@texastricities.nacdonline.org
Phone:
346-250-2802
Jenn Cox
Executive Director
Mya Risner
Director of Marketing, Partnerships & Engagement
Chennya Lister
Chapter Administrator
Find a Chapter
About The Event
Virtual | April 16, 2026 | 11:30 AM - 12:45 PM CDT
On April 16, 2026, directors examined how boards can navigate geopolitical disruption, protect personnel, and maintain operational resilience during extended conflict. The discussion, moderated by Julie Dill, NACD.DC, and featuring panelists Tina Faraca (TC Energy), Seth Krummrich (Global Guardian), and Ben Gonsoulin (Baker Botts), revealed a critical preparedness gap: companies with pre-positioned evacuation plans and duty of care providers moved employees safely within days, while unprepared organizations struggled to respond under duress.
Attendees learned how the first 24 to 48 hours after an incident determine legal exposure for years, requiring boards to drill evidence preservation, insurance notices, and regulatory reporting protocols before crises occur. The conversation explored how Iranian cyber attacks have already pre-positioned inside U.S. networks targeting critical infrastructure, requiring integrated oversight of physical and cyber security rather than siloed IT management.
Participants left understanding that North American LNG capacity faces three- to five-year recovery timelines, that permitting delays—not capital—constrain infrastructure expansion, and that geopolitical disruption is now the operating environment, not the exception boards plan around.
Key Topics Covered
- Crisis preparedness determines outcomes: Companies with pre-positioned evacuation plans, duty of care providers, and go-bags ready moved employees safely within days; unprepared companies scrambled for visas while families sheltered under fire
- First 24-48 hours set legal exposure for years: Evidence preservation, insurance notices, force majeure claims, and regulatory reporting all have strict timelines boards must drill before crises
- Cyber and physical security converge: Iranian attacks already pre-positioned in U.S. networks; boards must ensure OT/SCADA systems are segregated to prevent cyber intrusions from cascading to physical shutdowns
- Energy infrastructure faces 3-5 year recovery: Lost Qatari LNG capacity won't return quickly; North American facilities at 95-100% utilization; permitting delays are the critical bottleneck
- "We're at halftime with this conflict": Boards planning for quick resolution ignore Iran's $250 billion in damage, failing infrastructure, and ongoing instability
- Disruption is the operating environment: Geopolitical risk is persistent, not episodic—boards must shift from monitoring headlines to testing long-term preparedness
Key Takeaways
- On preparedness: "If you have a plan, resources, and time, you get the outcome you want; if you don't, you fail the math problem every time"
- On duty of care: Must be "one-button solution" integrating cyber, physical security, and global reach—tracking alone "just admires the problem, doesn't solve it"
- On legal obligations: Turn off auto-delete, implement hold notices, coordinate with legal counsel early—evidence preservation starts immediately
- On cyber threats: Iran has pre-positioned attacks targeting critical infrastructure (water, energy); boards need leading indicators, not just compliance reports
- On board governance: Add geopolitical conflict to enterprise risk frameworks; board minutes must show directors identified risks and responded to red flags
- On crisis response: Tabletop exercises reveal gaps written plans don't show; create crisis escalation matrices before incidents occur
Practical Actions Directors Can Take
- Review duty of care coverage: Does your provider operate in Level 4 conflict zones and integrate cyber, physical, and travel security?
- Conduct crisis management exercise: When was the last one? Did it involve all functions, vendors, and legal counsel?
- Stress-test incident response through tabletop scenarios: "This happens—what do you do next?" reveals whether management knows their roles
- Assess OT/SCADA system segregation: How confident are we that cyber intrusion can't cascade to physical shutdown?
- Create crisis escalation matrices in advance: Define when management handles, when board is informed, when board decides
- Update enterprise risk frameworks and public company disclosures to reflect current geopolitical threats
Program Videos
Program Resources
BAKER BOTTS
- Legal Considerations When Transacting Commercial Aircraft Portfolio Acquisitions and Financings in the Midst of War
- The Law of War - Legal Implications of the Iran Conflict: Oil and Gas Trading
- The Law of War - War and Energy Emergencies
GLOBAL GUARDIAN
- Assessing Duty of Care in Crisis Response
- 2026 Worldwide Threat Assessment
- 4 Stages of a Crisis: What Every Security Leader Should Know
- Executive Travel Risk: What Boards Need to Know about Duty of Care
- Middle East Escalation: Economic Pressure & Global Spillover
NACD
- 2026 Governance Outlook
- Directorship Magazine: Spring 2026 Issue
- New Release: Director’s Handbook on Cyber-Risk Oversight - Fifth Edition
Panelists
NACD Texas TriCities
Contact Us
Email:
programs@texastricities.nacdonline.org
Phone:
346-250-2802
Jenn Cox
Executive Director
Mya Risner
Director of Marketing, Partnerships & Engagement
Chennya Lister
Chapter Administrator
Find a Chapter
Final Days to Save on NACD Master Class®: Technology & Innovation Oversight Registration
Register by Friday, May 15 to take advantage of this
exclusive discounted pricing.
By registering for an NACD or NACD Chapter Network event, you agree to the following Code of Conduct.
| NACD and the NACD Chapter Network organizations (NACD) are non-partisan, nonprofit organizations dedicated to providing directors with the opportunity to discuss timely governance oversight practices. The views of the speakers and audience are their own and do not necessarily reflect the views of NACD. |
