The SID Cyber Resilience Guide for Boards and 90-minute simulation workshops are a measured starting point, but the right measure of success is not how directors perform in a crisis simulation. It is what questions they ask at audit and risk committee meetings throughout the year. Governance training that doesn't change the ongoing interrogation of security teams by boards produces better-informed crisis responders who still don't change the investment and resource decisions that determine whether a crisis occurs.
The SID Cyber Resilience Guide for Boards and 90-minute simulation workshops are a measured starting point, but the right measure of success is not how directors perform in a crisis simulation. It is what questions they ask at audit and risk committee meetings throughout the year. Governance training that doesn't change the ongoing interrogation of security teams by boards produces better-informed crisis responders who still don't change the investment and resource decisions that determine whether a crisis occurs.