World Economic Forum: Principles for Board Governance of Cyber Risk
Six principles designed to help corporate directors govern cyber risk.
Cyber and data
The board’s responsibility for data and cyber security: data strategy and governance, data as an asset, data quality and ethics, alongside threat awareness, incident preparedness and response, operational resilience, data protection and privacy. The questions board members should ask without needing to be technical.
NIST Cybersecurity Framework (CSF) 2.0
A practical, widely used framework for understanding and governing cybersecurity risk.