--- title: Having conversations about Cyber and IT in the Boardroom description: Boardroom conversations about Cyber Security are essential to managing and mitigating cyber risk within any highly regulated, not for profit organisation image: https://governwith.com/hubfs/Cyber%20Background-3.jpg --- [![GOVERNWITH logo 200-Apr-22-2024-01-11-17-5227-AM](https://governwith.com/hubfs/GOVERNWITH%20logo%20200-Apr-22-2024-01-11-17-5227-AM.png)](https://governwith.com) - [Our Products](https://governwith.com/products-0) - [Boardroom Plus](https://governwith.com/boardroom-plus) - [Executive Plus](https://governwith.com/executive-plus) - [Subcommittee Plus](https://governwith.com/subcommittee-plus) - [Professional Advice](https://governwith.com/products_professional-advice) - [GovernWith x Convene](https://governwith.com/products-gwc) - Why GovernWith - [About Us](https://governwith.com/about-us) - [The Contemporary Governance Model](https://governwith.com/contemporary-governance-model) - [Case Studies](https://governwith.com/case-studies-testimonials) - [Our Partners](https://governwith.com/partners) - Resources - [Webinars](https://governwith.com/webinars) - [Blog](https://governwith.com/blog) - [Contact Us](https://governwith.com/contact) [JOIN NEWSLETTER](https://governwith.com/join-newsletter) [PLATFORM LOGIN](https://governwith.app) webinars # Having conversations about Cyber and IT in the Boardroom Boardroom conversations about Cyber Security are essential to managing and mitigating cyber risk within any highly regulated, not for profit organisation [GovernWith](https://governwith.com/webinars/author/govern-with) May 10, 2023 --- ## Changing Technological Landscape With the ever-changing landscape of technology, it brings with it a lot of new language to the table, which makes it seem complicated and one of those technically detailed conversations. It doesn’t have to be.  The frequency we are hearing terms such as cyber and cyber-security reported in the news is growing – even as recently as last week with the NSW Education department being hit by a cyber-attack. ## Cyber Crime Across Australia The Australian Institute of Criminology has[released a report](https://www.aic.gov.au/publications/sb/sb34) putting the total economic cost of cyber-crime across Australia at $3.5 billion in 2019, including $1.9 billion lost by individual victims.  With the depth and breadth of technology needed to run and work within an organisation increasing and the ongoing maintenance of the technology that this entails, the risk the IT infrastructure poses to the organisation is also escalating.  ## Board Directors Must Get Educated on the Risks As a Board director, you’re empowered to question the risks of any aspect of an organisation and with that comes the need to educate yourself to understand those risks and your organisation's preparedness to respond to those risks.  ## Director Liability It’s also worth noting that the Australian Federal Government is working on new cyber-security standards that include corporate governance, first floated in the 2020 Cyber Security Strategy,[which may hold directors personally responsible for cyber-attacks](https://www.smh.com.au/politics/federal/real-and-present-danger-government-considers-making-company-directors-personally-liable-for-cyber-attacks-20210712-p588vz.html).   ## Cyber is an Equivalent Level of Risk Addressing cyber and IT infrastructure risk should be no different to addressing finance or stakeholder engagement risk for example.  It’s important that Board directors identify these risks as organisational risks and not just an IT problem, as taking this approach will encourage your peers, stakeholders and employees to take the same approach.  In our research into cyber-security,[Techradar](https://www.techradar.com/news/people-are-still-the-biggest-security-threat) recently reported that up to 99 per cent of cyber-attacks require human interaction to execute.  This is why it is so important to bring all levels of the organisation along on the cyber and IT infrastructure conversation.  ## How do you have the conversation?  The CEO is a lynchpin in the conversation, bringing information to the board and acting as a leader for the organisation's attitude to this topic. A great place to start is to have a strategic plan for cyber and IT Infrastructure for the organisation in place and that plan should be a regular part of the Board’s agenda and papers.  ## What questions should be raised at a Board meeting?  The Australian Cyber Security Centre has published a prioritised list of mitigation strategies to assist organisations in protecting their systems, called the[Essential Eight.](https://www.cyber.gov.au/acsc/view-all-content/publications/essential-eight-explained)  A great question off the back of those strategies is “how do we stack up?”  It doesn’t have to be that detailed though, as suggested in the book [The Secure Board](https://www.thesecureboard.com/get-your-copy-now),  ## Great Cyber Security Questions to Ask at Board Meetings 1. Do we know who has access to our critical information assets and how is this monitored and managed?  2. What happens in the event a key supplier is compromised?  3. In our security team, how many people are focussed on the security of technology, and how many are focussed on the behaviours of our people?  4. Are we doing everything we can for our customers to protect their data that we hold?  ## Start a Cyber Risk Conversation The most important thing though, is that the cyber and IT infrastructure conversation at the Board room level starts straight away before an incident occurs.  Acceptance of these risks as organisational risks needs to be guided from the top, to then filter down through the whole organisation.    ## Cyber Security Expert If you’d like to hear more in depth, expert advice from one of Australia’s leading cyber security experts, Michael Parrant from Aon, simple watch the youtube video below. This article takes inspiration from Anna and Claire’s book,[The Secure Board](https://www.thesecureboard.com/get-your-copy-now), which is a fantastic starting point for assuring your board is addressing and understanding the cyber risk in your organisation. [webinars](https://governwith.com/webinars/tag/webinars) [Cyber Security](https://governwith.com/webinars/tag/cyber-security) [Board of Directors](https://governwith.com/webinars/tag/board-of-directors) ## Similar posts Cyber Security ### [How Boards Can Manage Their Way Through a Cyber Attack](https://governwith.com/webinars/how-boards-can-manage-their-way-through-a-cyber-attack) Board's Guide to Navigating a Cyber Attack: Discover Key Approaches for Boards to Successfully Manage and Overcome Cyber Attacks with David Rudduck,... GovernWith Jun 30, 2023 webinars ### [Cyber Security for Boards - Webinar](https://governwith.com/webinars/cyber-security-for-boards-webinar) Join Fi Mercer and co-authors of 'The Secure Board' for a deep dive into the critical topic of Cyber Security in the boardroom. Adrian Wagner May 18, 2021 Cyber Security ### [Essential Eight Maturity Model to Prevent Cyber Attacks](https://governwith.com/webinars/essential-eight-maturity-model-to-prevent-cyber-attacks) The Essential Eight Maturity Model is a comprehensive framework developed by the Australian Signals Directorate (ASD) to address cyber security risks. GovernWith May 26, 2023 ### Governance Insights Each week, join us in a governance 'fireside chat' where you ask the questions and we give you the answers.  The latest data and trends from the GovernWith platform are included in our Insights Sessions.   [![GovernWith Logo](https://governwith.com/hubfs/Logos/Logo_GW%2Btagline.png)](https://governwith.com) GovernWith Pty Ltd 33 Mackey St West 9 Federal Mills Park North Geelong ### Products - [Boardroom Plus](https://governwith.com/boardroom-plus) - [Subcommittee Plus](https://governwith.com/subcommittee-plus) - [Executive Plus](https://governwith.com/executive-plus) - [GWCiT](https://governwith.com/products-gwcit) ### Resources - [Blog](https://governwith.com/blog) - [Webinars](https://governwith.com/webinars) ### Why GovernWith - [About Us](https://governwith.com/about-us) - [Partners](https://governwith.com/partners) ### Contact - [Contact Us](https://governwith.com/contact) © 2023 GovernWith Pty. Ltd. Rights Reserved | [**Terms and Conditions**](https://governwith.com/terms-and-conditions)| **[Privacy Policy](https://governwith.com/privacy-policy)** [Powered by Atlas - a B2B SaaS HubSpot theme](https://www.kalungi.com/atlas-hubspot-theme-for-b2b-saas-software) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "GovernWith", "url" : "https://governwith.com/webinars/author/govern-with" }, "dateModified" : "2023-12-11T02:52:47.432Z", "datePublished" : "2023-05-10T02:07:30.000Z", "headline" : "Having conversations about Cyber and IT in the Boardroom", "image" : [ "https://governwith.com/hubfs/Cyber%20Background-3.jpg" ], "mainEntityOfPage" : { "@id" : "https://governwith.com/webinars/having-conversations-about-cyber-and-it-in-the-boardroom", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://governwith.com/hubfs/GOVERNWITH_Master_Terracotta_RGB.png" }, "name" : "GovernWith Pty Ltd" } } ```