IoD Briefing Examines the Board's Role in Cyber Security Oversight

Welcome address

Our latest Briefing event tackled one of the most pressing issues facing boards today: cybersecurity, with a clear focus on the duties and responsibilities of directors.

Opening the event, Darren Clarke, Business Development Manager at IoD Ireland, welcomed a packed audience and set the scene for the evening. He highlighted recent IoD Ireland research showing that 48% of directors believe Ireland’s upcoming EU Presidency will increase their organisation’s exposure to cyber risk, underscoring the urgency of the topic. Darren emphasised that cybersecurity is now firmly a boardroom issue, with directors playing a critical role in strengthening oversight, resilience, and response. He also acknowledged and thanked Forvis Mazars for their continued support of the IoD Ireland Briefing Series.

Strengthening Oversight and Decision-Making

The expert panel session included: Gary Delaney, Managing Director and International Chief Information Security Officer at BNY Mellon; Dera McLoughlin, Partner and Head of Consulting at Forvis Mazars; and Joseph Stephens, Director of Resilience at the National Cyber Security Centre Ireland (NCSC). The discussion was moderated by Caroline Spillane CDir, Chief Executive, IoD Ireland.

Discussion focused on the need for boards to embed cybersecurity more fully into strategic decision-making and risk appetite. Effective oversight was described as going beyond routine updates, requiring active engagement, informed challenge and clear accountability across the organisation. The importance of building cyber literacy at board level and ensuring clarity around roles and responsibilities was emphasised.  Cyber securuty expertise and supports from IoD Ireland, as well as the NCSC, were cited as examples of resouces for directors. Key resources cited from the NCSC included the Cyber Fundamentals Framework and the National Cyber Risk Assessment.

Building Resilience and Preparing for Incidents

The conversation concluded with a focus on resilience, highlighting the need for robust assurance, effective third-party risk management and strong preparation for potential incidents. Panellists emphasised that organisations which invested in planning, testing and clear response frameworks were better positioned to respond, with leadership behaviours playing a critical role in managing the impact of a cyber event.

Final Reflections and Support for Directors

After an engaging Q&A, Caroline Spillane took the opportunity to thank members for their engagement at the event, and also the expert panel of speakers for their insight, including: Gary Delaney, Managing Director and International Chief Information Security Officer at BNY Mellon; Dera McLoughlin, Partner and Head of Consulting at Forvis Mazars; and Joseph Stephens, Director of Resilience at the National Cyber Security Centre Ireland (NCSC).

The event was closed by Darren Clarke, Business Development Manager, IoD Ireland, who reaffirmed the Institutes’ role as a member organisation, encouraging feedback on content, and events that matter most. He also took the opportunity to remind members of the support and resources available to them, including latest learning and development opportunities, events, and director content.

IoD Ireland extends its thanks to Forvis Mazars for sponsoring the IoD Ireland briefing series. For more information on upcoming events visit the IoD Ireland website.