Many boards overestimate their company’s cyber-resilience—and underestimate their own role in shaping it.

Preparing for an attack that breaches your defenses is the best way to minimize the damage it can do.

Proper oversight starts with gathering the right information.

Featuring Dr. Keri Pearlson, Executive Director of the Cybersecurity at MIT Sloan (CAMS) Research Consortium. Complimentary HBR Webinar Thursday, May 25, 12:00 pm EDT In the face of increasing cybersecurity threats — that pose significant risks for firms — boards of directors have a unique role to play in helping their organizations manage these threats. Boards […]

A survey of 600 directors suggests that growing awareness of cyber risk isn’t enough to drive better preparedness.

Most organizations put more resources toward identification, protection, and detection rather than their ability to respond to and recover from a cyber...

A proposed SEC rule would require companies to disclose their cybersecurity governance capabilities.

Don’t leave concerns about critical vulnerabilities for tomorrow.

Few leaders will deny the importance of cybersecurity in their company's digital offerings. And yet, too often, security is an afterthought, addressed...