City Councils Are Having the Wrong Conversations About Cybersecurity

In the Harvard Business Review article "Boards Are Having the Wrong Conversations About Cybersecurity," authors Lucia Milică and Dr. Keri Pearlson highlight the ineffective approach of many corporate boards when it comes to cybersecurity oversight. Despite increasing awareness of cyber risks, board members often lack the right questions to ask and fail to prioritize resilience over protection. The authors stress the importance of board-CISO (Chief Information Security Officer) engagement and personal familiarity to bridge the communication gap and align priorities. They emphasize the need for boards to focus on resilience, assume cyberattacks will occur,