David A. Katz is a partner and Laura A. McIntosh is a consulting attorney at Wachtell, Lipton, Rosen & Katz. This post is based on a Wachtell Lipton publication by Mr. Katz and Ms. McIntosh.
Recent global cyberattacks have rudely reminded corporate America that cybersecurity risk management must be at the top of the board of directors’ corporate governance agenda. Companies have no choice but to prepare proactively, while directors must understand the nature of cybersecurity risk and prioritize its oversight. Preparation, monitoring, emergency response, and disclosure are topics that boards should consider regularly to properly oversee cyber-risk management. Boards should receive periodic updates from management and its expert advisors on the rapidly developing regulatory cybersecurity environment and on the company’s compliance with applicable cybersecurity standards.
