Cybersecurity

Cyber risk governance, operational resilience and security control assurance.

Introduction

Cybersecurity is now a board-level risk. Governance and control professionals help organisations decide how much cyber risk they will accept, and prove that defences work.

New regulation makes management bodies personally accountable for cyber risk and sets strict incident-reporting deadlines — raising the bar for governance and assurance.

Governance

Board cyber literacy, reporting lines and accountability for cyber risk.

Controls

Security control frameworks, control testing and independent assurance.

Risk

Cyber risk quantification, threat-led scenarios and third-party exposure.

Compliance

Incident reporting duties and sector-specific security obligations.

Sub-themes

The topics this pillar covers in its events, articles and working groups.

Cyber risk governance

Appetite, accountability and board reporting.

Security control frameworks

Selecting and mapping frameworks to obligations.

Incident response & reporting

Playbooks, decision rights and regulatory notification.

Third-party security

Supplier assurance and concentration risk.

Operational resilience

Recovering critical services after a cyber event.

Identity & access governance

Privileged access, reviews and joiner-mover-leaver controls.

Cyber assurance & IT audit

Testing that controls are designed and operating well.

Security culture

Behaviour, awareness and the human layer.

Regulatory watch

The frameworks and regulation we track for this pillar. Updates are published as Insights.

Europe

NIS2 Directive
Digital Operational Resilience Act (DORA)
Cyber Resilience Act

GCC

Saudi National Cybersecurity Authority Essential Cybersecurity Controls
UAE Information Assurance Regulation
Qatar National Information Assurance standard

Global

NIST Cybersecurity Framework 2.0
ISO/IEC 27001:2022
CIS Critical Security Controls

Events & webinars

Upcoming sessions for this pillar.

New dates are being finalised. Join the network to hear about upcoming roundtables, webinars and panels first.

Articles & insights

Analysis and regulatory updates from practitioners.

Cybersecurity

Five questions boards should ask about cyber resilience

New European rules make management bodies accountable for cyber risk. These five questions help directors move beyond technical updates.

LIC Editorial Team1 min read

Expert contributors

The practitioners who lead and contribute to this pillar.

Replace the placeholders with confirmed pillar leads and contributors (photo, name, role, organisation).

Pillar lead

[Contributor name]

[Role]
[Organisation]

Contributor

[Contributor name]

[Role]
[Organisation]

Contributor

[Contributor name]

[Role]
[Organisation]

Bring your expertise to the Cybersecurity pillar.

We invite women working across Governance, Risk, Internal Control, Compliance and related disciplines to express their interest in joining Ladies in Control and contributing to its development.