When a data breach or other cyber event occurs, the damages can be significant, often resulting in lawsuits, fines and serious financial losses. In order for organizations to protect themselves from cyber risks, corporate boards must play an active role. Not only does involvement from leadership improve cyber security, it can also reduce liability for board members.
To help oversee their organization’s cyber risk management, boards should ask the following questions:
- Question 1 Does the organization utilize technology to prevent data breaches?
Boards should ensure that the management team reviews company technology at least annually, ensuring that cyber security tools are current and effective.
- Question 2 Does the organization have a comprehensive cyber security program that includes specific policies and procedures?
Boards should ensure that cyber security programs align with industry standards and are audited on a regular basis to ensure effectiveness and internal compliance.
- Question 3 Has the management team provided adequate employee training to ensure sensitive data is handled correctly?
Boards can help oversee the process of making training programs that foster cyber awareness.
- Question 4 Has management taken appropriate steps to reduce cyber risks when working with third parties?
Boards should work with the company’s management team to create a third-party agreement that identifies how the vendor will protect sensitive data, whether the vendor will subcontract services and how it will inform the organization of compromised data.
- Question 5 Has the organization conducted a thorough risk assessment and considered purchasing cyber liability insurance?
Boards, alongside the company’s management team, should conduct a cyber risk assessment and identify potential gaps. From there, organizations can work with their insurance broker to customize a policy that meets their specific needs.
Worried about your company's potential exposures? Complete the form to get some more information, and let Seubert's team analyze your current risk exposures and make strategic recommendations to properly insure your operation.
