Boards Still Lack Cybersecurity Expertise

Most S&P 500 companies' board directors lack cybersecurity experience, with only 7 having current or former information security officers (CISOs). About half had a director with adjacent tech experience. Directors' cyber-expertise viewed as crucial for governance. Finding right candidates for board-level positions difficult due to cybersecurity's technical nature and recent elevation to senior leadership; broader business experience often lacking. Solutions include better cyber education for boards, elevating CISO role, and expanded business knowledge for security chiefs.

Opens on WSJ