Board Cyber Readiness

The six questions your board
will ask about cyber.

Every board now owns cyber risk. These are the six questions that surface it — from an audit committee, an insurer, a regulator, or an investor. Below each, what a good answer sounds like.

01

What is our single largest cyber risk — in dollars — and who owns it by name?

A good answer: A good answer is a number and a named executive. Silence here is what a board minute records.

02

What would a ransomware event actually cost us — recovery, downtime, and regulatory penalty combined?

A good answer: A range, modeled from our operations. Not “we have backups.”

03

Are we adequately insured — and would our insurer agree?

A good answer: Evidence our carrier has already accepted. Renewals now turn on it.

04

Who is governing our AI systems — and what is our liability if one makes a bad decision?

A good answer: A named owner and a record. For most organizations this answer does not yet exist.

05

If our systems went down tomorrow morning, how long until we recover — and at what cost per hour?

A good answer: A rehearsed number, not an assumption discovered during the incident.

06

If a regulator asked us to prove our cyber governance today, what would we hand them?

A good answer: A documented trail, prepared before the letter arrives.

The one-page guide

Take the questions
to your next meeting.

Get the board-ready one-pager — the six questions with the answers to expect, formatted to bring into the room. Instant download. No spam. Nothing sold.

Your email is used only to send the guide. Vendor-neutral by design.