Cyber Security Toolkit for Boards

Resources to enable Boards to govern cyber risks with confidence.

Board members have a critical role in ensuring their organisations are not just resilient and secure, but are ready to exploit the opportunities that technology brings. The Toolkit helps Boards to ensure that cyber resilience and risk management are embedded throughout an organisation, including its people, systems, processes and technologies.

How to use the Toolkit

The Toolkit is organised around the Cyber Governance Code of Practice (opens to GOV.UK), and explains how Boards can implement the principles outlined in the Code. It includes two introductory modules: the first on the Toolkit structure and the second for those new to cyber security.

Getting started with the Board Toolkit

Introducing the Cyber Security Toolkit for Boards

Guides Board members on how to navigate the toolkit and its benefits.

What is cyber security?

Explains the Board’s role in cyber security, why organisations are at risk, and the factors behind cyber attacks.

Principle A: Risk Management

The Toolkit is organised around the Cyber Governance Code of Practice, and the modules below will support Boards in implementing the key actions from Principle A: Risk Management.

Guidance

Identifying the critical assets in your organisation

Understanding how technical assets are critical to your organisation's objectives is key to effective risk management.

Guidance

Risk management for cyber security

Good risk management will help you to make better, more informed decisions about your cyber security.

Guidance

Collaborating with your supply chain and partners

Cyber attacks on your suppliers can be just as damaging as an attack on your own networks.

Principle B: Strategy

The Toolkit is organised around the Cyber Governance Code of Practice, and the modules below will support Boards in implementing the key actions from Principle B: Strategy.

Embedding cyber security into your organisation

Cyber security is a team sport: empower everyone

Cyber security regulations and directors duties in the UK

This section summarises relevant cyber security regulations that boards need to be aware of.

Principle C: People

The Toolkit is organised around the Cyber Governance Code of Practice, and the modules below will support Boards in implementing the key actions from Principle C: People.

Developing a positive cyber security culture

People are the strongest link; they’re what make your organisation thrive.

Growing cyber security expertise

As the demand for cyber security professionals grows, your organisation should plan ahead to draw upon expertise.

Principle D: Incident Planning, Response and Recovery

The Toolkit is organised around the Cyber Governance Code of Practice, and the modules below will support Boards in implementing the key actions from Principle D: Incident Planning, Response and Recovery.

Guidance

Planning your response to cyber incidents

Good incident management can reduce their financial, reputational and operational impact.

Part of

Cyber Security Toolkit for Boards

Principle E: Assurance & Oversight

The Toolkit is organised around the Cyber Governance Code of Practice, and the modules below will support Boards in implementing the key actions from Principle E: Assurance & Oversight.