Our research is based on a representative number of in-depth interviews with Board members of mainly larger organisations across different industries or organizations that are part of critical infrastructure. In addition, we survey Executives through our on-line platform collecting their views and insights on the same matter and analyse sanitised cybersecurity Board reports.

A Business man using a ballpoint pen to indicate a graph on a paper

our research

These interviews are conducted by experienced research fellows and focus on how cybersecurity is governed, reported, and discussed at Board level. Particular attention is given to the information Boards rely on to oversee cyber risk effectively, and how reporting practices either support or hinder meaningful Board-level discussion.​​

To ground the research in real-world practice, participating Board members are invited to provide a recent, sanitised cybersecurity Board report. These artefacts provide valuable insight into current reporting approaches and help identify patterns of better practice that inform the Cybersecurity Board Reporting Framework.

Building on the findings of our latest report, the research programme continues in 2026 using the same proven methodology, while expanding to several geographies globally, including Australia, Belgium, Canada, the Netherlands, New Zealand and Switzerland. In addition, we also survey Executives to provide the executives’ perspectives on the same matter. These views will complement Boards’ perspectives and result in a 360-degree analyses and framework for all stakeholders.​​

This broader scope will deepen the evidence base and further refine our understanding of what good looks like in cybersecurity Board reporting across different governance environments.

360-degree view on cybersecurity Board reporting​

View our reports

Cybersecurity Board Reports

Our study examined cybersecurity reporting practices across 67 boards, including publicly listed companies and major organizations. By conducting a questionnaire and analyzing sanitized recent board reports, we identified significant inconsistencies in reporting approaches. Supported by the CCB in Belgium, this research underscores the need for greater standardization to enhance clarity and effectiveness in cybersecurity board reporting.

Product comparison

Full report

Lorem ipsum dolor sit amet, consectetur adipiscing elit.

Preview

Lorem ipsum dolor sit amet, consectetur adipiscing elit.

Lorem ipsum dolor sit

Unlimited
1

sed do eiusmod tempor incididunt

ut labore et dolore

magna aliqua

Ut enim ad minim veniam

The Project timeline

06/2024

Project start

09/2024 - 01/2025

Interviews

02/2025 - 03/2025

Analysis and Reporting

04/2025

Publishing

67

Participating organisations

63
%

Were listed

37

Sanitized recent Cybersecurity Board Reports​

want to Become a fellow

Join a growing network of leading organisations contributing to a large-scale study on cybersecurity. As a Fellow, your company will help shape industry insights, benchmark best practices, and drive forward the future of digital security.

Cookies & Privacy

We use cookies to understand how you use our site and to improve your experience. This includes personalizing content and advertising. By continuing to use this website, you accept our use of essential cookies. Privacy Policy