Leadership
NIS2 for the boardroom: what directors are now accountable for
NIS2 makes management bodies personally responsible for cybersecurity oversight. A plain-language guide to the obligations and the questions to ask.
SAMO Advisory · · 9 min read
NIS2 moves cybersecurity from the IT department to the board agenda. Directors must approve risk-management measures, oversee their implementation and undergo training.
Five questions every board should ask
- Are we an essential or important entity, and in which member states?
- Can we report a significant incident within 24 hours?
- Who owns supply-chain security for our critical vendors?
- When was our incident response plan last tested?
- How do we measure improvement quarter over quarter?