How attacks happen
Ransomware, email fraud and supplier compromise, explained through real-world patterns.
Board Cyber Briefing
A board cyber briefing is a half-day session that explains cyber risk to directors in plain language: what they are responsible for, what decisions land on them in an attack, and what to ask management.
Board Cyber Briefing
What it is
A half-day session for the board, delivered at your office or online, covering how cyber attacks unfold, the board's oversight role, breach notification duties and a short decision exercise.
Why organisations need it
Directors are often asked to approve cyber budgets and policies without a way to judge them, and are expected to lead when an attack happens. The Cyber Security Act 2024, the PDPA's breach notification duties and, for financial institutions, BNM's technology risk expectations all place attention on senior management and the board. A short briefing gives directors the language and the questions, so oversight is informed rather than ceremonial.
What the engagement covers
The board's role
What oversight means in practice and what belongs to management.
Legal and regulatory duties
PDPA breach notification, the Cyber Security Act and sector rules relevant to you.
Decisions in an attack
Shutting systems down, paying or not, telling customers and regulators, and who decides.
Reading cyber reports
What good reporting looks like and warning signs in a dashboard.
Questions to ask
A one-page list for the next board meeting.
What the business gets out of it
Directors who can ask good questions
Oversight with substance.
No jargon
Explained for non-technical readers.
Faster decisions in a crisis
The board has thought through the hard calls.
Evidence of oversight
A documented briefing and a question list.
Tailored to you
Examples drawn from your sector.
How it works
How the engagement runs
01
Brief
Agree audience, sector and concerns.
02
Prepare
Tailor examples and the decision exercise.
03
Deliver
Half-day session with discussion.
04
Follow-up
Send the question list and summary.
05
Optional next step
A readiness review or continuity plan if gaps appear.
Deliverables
What you receive
Briefing session
Half day, in person or online.
Question list for directors
One page to use at the next meeting.
Summary note
Key points and suggested follow-ups.
Who it is for
Who this is built for
Industries
Company sizes
Departments
Sample half-day agenda
A typical session. Timings and topics are adjusted to your sector and the questions your board has.
| Time | Session | What we cover |
|---|---|---|
| 9:00 AM to 9:45 AM | How attacks happen | Ransomware, email fraud and supplier compromise, explained without jargon. |
| 9:45 AM to 10:30 AM | The board's role | What oversight means in practice, what belongs to management, and the duties that apply to you. |
| 10:30 AM to 10:45 AM | Break | |
| 10:45 AM to 11:30 AM | Reading cyber reports | What good reporting looks like, and warning signs in a dashboard. |
| 11:30 AM to 12:30 PM | Decision exercise | A short simulated attack: shutting systems down, telling customers and regulators, and who decides. |
| 12:30 PM to 1:00 PM | Questions and next steps | Your question list for the next board meeting and suggested follow-ups. |
Questions directors can ask management
A sample from the one-page list you take away.
- Which three systems would hurt most if they stopped, and how long until each is back?
- When did we last restore from backup, and how long did it take?
- Who decides whether we shut systems down during an attack, and do they know it?
- Could we notify the Commissioner within 72 hours of a personal data breach?
- Is multi-factor authentication switched on for email and remote access?
- Which suppliers can reach our systems or data, and how do we know they are safe?
- What changed in the last cyber report, and what did management do about it?
FAQ
FAQ
Half a day, usually three to four hours with a break.
No. The session is written for non-technical readers.
Yes. We use examples and regulatory context relevant to your sector, such as financial institutions or NCII entities.
Either. In person works best for discussion, and online suits dispersed boards.
Not stated for this service. Ask us when you enquire.