How a board of directors shapes cybersecurity defense

McKinsey (Mar 20, 2024) "Boards of directors: The final cybersecurity defense for industrials" argues the board is the last line of defense in ensuring cybersecurity initiatives are planned and funded. Cyberthreats are escalating with digitisation, cloud adoption, advanced connectivity and AI including gen AI. Industrial operational technology — once protected by air-gapping — now sees a skyrocketing attack surface as digitisation removes the gap and threat actors target the new connectivity. Boards must ensure executives set a high cyber standard, follow through on it, embed security by design in digital products, and make technology teams share cybersecurity responsibility. Direct read-out for SEA mid-market industrial conglomerates digitising plants.