In April, the UK Government guidance made it official: cyber risk is a board-level responsibility, not a task to delegate to IT.  

Many leadership teams haven't caught up with what that means for them - cyber risk still gets treated as a technical issue, owned by IT, rather than something the board is directly accountable for. That gap matters: when a breach happens, ‘we didn't know’ is no longer a defence regulators, insurers, or clients will accept - accountability sits with the board. 
 
This applies as much to Non-Executive Directors as it does to executive leadership - oversight sits with everyone around the board table. 

In this live session, Kerrie Machin, Director at Mitigo, discusses what board-level responsibility looks like in practice - and the gap most leadership teams don't realise exists until they're asked to prove it. 

Key discussion points 

• What the government's guidance requires of boards - and where awareness stops and accountability starts
• The most common gap between what leadership believes is in place and what's actually been tested or evidenced
• Why this is increasingly a question insurers, regulators, and clients are asking  
• What good board-level oversight looks like
• Practical advice and takeaways on what to prioritise first, before it's asked of you  

Who this is for 

CEOs, CFOs, Partners, Non-Executive Directors, and other senior leaders across professional services who are ultimately accountable for cyber risk oversight - whether or not they sit close to IT day-to-day. 

Why register

Cyber risk is now a board responsibility whether leadership has caught up with that or not. This session sets out what's expected of boards today - and what to put in place before a breach, regulator, or client forces the issue.