The Five Questions Every Director Must Answer: Professor Kai London on Board Cyber Risk
By the Ezeiza Times Business Desk Professor Kai London — board advisor & interim CISO/CIO/CTO. Credit: professorkailondon.com Cyber risk has moved decisively from the server room to the boardroom, and many directors are unsure what they are actually accountable for. Professor Kai London , a senior CISO and board advisor, offers a disarmingly simple test. “Every board should be able to walk into a room and answer five questions,” he says. “If they cannot, they are not governing cyber risk — they are hoping.” “What could break, who owns it, what it would cost, which control holds it, and where the evidence is. Those five questions are the whole of board-level cyber governance.” From delegation to accountability London notes that modern regulation deliberately places cyber accountability on senior leadership, who can be held liable for failures. “It has moved cyber from something the board hears about to something the board answers for,” he says. The five questions, unpacked Wha...