May 12, 2026
Insights from our latest webinar
Cyber risk is already sitting on board agendas.
The problem is that many boards and executive teams are still being asked to oversee cyber security without clear visibility into what “good” actually looks like in practice.
As our director, Gerry Lynch opened in our recent Govn365 webinar with Daniel Watson (Vertech):
Cyber security can easily become an area where boards receive plenty of information but not always much confidence.
And that gap matters. Because cyber is no longer just an IT issue.
It is now a core business, operational, leadership and governance issue that touches:
The challenge for boards is no longer whether cyber matters. It is whether governance approaches are keeping pace with the level of exposure organisations now face.
Many organisations believe they are more prepared than they actually are. Not because people are negligent. But because reporting can sometimes create a false sense of assurance.
Boards are often told:
But those things alone do not necessarily answer the real governance question:
Would we actually be ready if something went wrong?
As Daniel discussed throughout the session, effective cyber governance is less about technical detail and more about visibility, accountability and practical preparedness.
A common concern among directors is feeling unequipped to govern cyber risk because they are not technical specialists. But the session made an important distinction:
Boards do not need to become cyber experts. They need to become confident in asking the right governance questions.
Questions such as:
The discussion repeatedly returned to one key idea:
Good governance is not about understanding every technical detail. It is about ensuring enough visibility exists to support informed oversight and decision-making.
Another prominent theme was the difference between reporting and understanding. Cyber reporting can easily become highly technical, overloaded with acronyms or focused on activity metrics that do not help boards assess real exposure.
In practice, this can leave leadership teams in a difficult position:
Receiving regular updates while still lacking confidence about organisational readiness.
As discussed during the session, one of the biggest governance risks is not a lack of information. It is information that creates comfort without clarity. This is where stronger communication between technical teams, executives and boards becomes critical.
Because governance visibility depends on translating cyber risk into business risk, not technical language alone.
The webinar explored where accountability for cyber security should sit across the organisation. A key message was that cyber cannot simply be delegated to IT.
Technology teams play a critical role. But strong cyber outcomes depend on leadership alignment across the board, CEO, executives and operational leaders.
Cyber risk intersects with:
Which means accountability cannot sit in one function alone.
The organisations building stronger resilience are typically the ones where cyber governance is treated as an organisation-wide leadership responsibility rather than a standalone technical function.
The need for boards to focus less on volume of activity and more on indicators of capability and resilience.
That means moving beyond questions like:
“How many risks were reported?”
And focusing more on:
Because more reporting does not automatically create stronger governance.
In some cases, it can actually obscure where the real risks sit.
As cyber threats continue to evolve particularly with AI accelerating both the speed and sophistication of attacks, governance approaches also need to evolve.
The organisations that will navigate this best are not necessarily the ones with the most complex frameworks or the most reporting.
They are the ones creating:
Because ultimately, strong cyber outcomes do not come from hoping protections are working. They come from leaders having enough clarity to know whether they are.
Watch the full webinar discussion here
As part of the discussion, Daniel Watson has offered a practical starting point for organisations looking to strengthen their cyber preparedness.
Boards and executives interested in developing an AI-assisted cyber policy template can contact Daniel directly through Vertec to access a complimentary template resource.
For organisations looking to develop or strengthen a more comprehensive incident response plan, Daniel also offers tailored advisory sessions to work through key considerations, identify gaps and help build a fit-for-purpose response framework aligned to the organisation’s operational environment.
As cyber threats, operational disruption, and leadership accountability continue to converge, the real test of governance is no longer what exists on paper but how boards and executives respond under pressure.
We’ll be continuing this conversation in our upcoming webinar:
Crisis Ready or Crisis Exposed? The Governance Test Most Boards Aren’t Prepared For
Joining us for this session is George Adams — Professional Director, 2024 Deloitte Chair of the Year finalist, and 2025 Lifetime Achievement Award recipient for his contribution to safety leadership in New Zealand. George brings decades of board-level experience navigating high-stakes governance challenges, and his perspective on what real crisis readiness looks like is not to be missed.
This is a session you won’t want to miss, whether you’re a board director, executive, or governance professional looking to stress-test your organisation’s readiness before a crisis hits.
Register here
If you’re starting to think about how this applies in your organisation, we’re always open to a conversation.
Start a conversation with Govn365
Mar 29, 2026
Mar 12, 2026
Mar 2, 2026
Nov 26, 2025
Sep 29, 2025
Aug 12, 2025
Jul 3, 2025
Jun 4, 2025
May 1, 2025
Apr 2, 2025
