Capability & Resourcing

Board & Executive Cyber Briefings

Cyber literacy for the people who are now personally accountable for it.

The situation

NIS2 Article 20 requires management bodies to approve cybersecurity risk measures, oversee their implementation and follow training — and makes them liable for failing to do so. DORA imposes parallel duties on financial-sector management bodies.

We deliver briefings that treat directors as intelligent non-specialists: what the law now requires of them personally, what questions to ask management, what good evidence of oversight looks like, and how to read a security report critically.

What the client receives

Schedule of deliverables

01Management body accountability briefing under NIS2 and DORA
02Cyber risk literacy session for non-executive directors
03Board reporting standard and question set
04Documented training evidence for the compliance file
05Annual refresh and regulatory update briefing
06Crisis decision-making session for the executive team

Frameworks and standards

Assessment is carried out against named references, so a conclusion can be traced back to the requirement it was measured against.

NIS2 Art. 20
DORA Art. 5
CGEIT practice
NIST CSF 2.0 Govern

Capability & ResourcingFractional CISO / Virtual CISOBoard-grade security leadership at the fraction of a role that you actually need.Service detail Capability & ResourcingSecurity Awareness & Phishing SimulationBehaviour change, measured — not an annual video nobody watches.Service detail

Discuss this engagement

Tell us about the board's obligations and the evidence file behind them and we will set out the scope, the method and the reporting format.