5 Cyber Questions Every Leader Needs to Know

When a data breach or other cyber event occurs, the damages can be significant, often resulting in lawsuits, fines and serious financial losses. In order for organizations to protect themselves from cyber risks, corporate boards must play an active role. Not only does involvement from leadership improve cyber security, it can also reduce liability for board members.

To help oversee their organization’s cyber risk management, boards should ask the following questions:

Question 1
Does the organization utilize technology to prevent data breaches?
Boards should ensure that the management team reviews company technology at least annually, ensuring that cyber security tools are current and effective.
 

Question 2
Does the organization have a comprehensive cyber security program that includes specific policies and procedures?
Boards should ensure that cyber security programs align with industry standards and are audited on a regular basis to ensure effectiveness and internal compliance.
 

Question 3
Has the management team provided adequate employee training to ensure sensitive data is handled correctly?
Boards can help oversee the process of making training programs that foster cyber awareness.
 

Question 4
Has management taken appropriate steps to reduce cyber risks when working with third parties?
Boards should work with the company’s management team to create a third-party agreement that identifies how the vendor will protect sensitive data, whether the vendor will subcontract services and how it will inform the organization of compromised data.
 

Question 5
Has the organization conducted a thorough risk assessment and considered purchasing cyber liability insurance?
Boards, alongside the company’s management team, should conduct a cyber risk assessment and identify potential gaps. From there, organizations can work with their insurance broker to customize a policy that meets their specific needs.
 

Worried about your company’s potential exposures? Contact Seubert & Associates, Inc. to learn more about cyber risk mitigation strategies that you can start using today to keep your business secure.

This was taken from our January 2020 Commercial Risk Advisor Newsletter, read the full edition here.