A number of companies do Risk Management and Compliance education for BoD's.
Here is a list of a few of them:
https://www.alvarezandmarsal.com/global-locations
https://boardsource.org/
https://www.icd.ca/
You would need to look at their programs to determine if they can assist you or not.
Additionally, talk to the Audit department (they sometimes have a member of their staff that attends Board meetings) and they might be able to talk to your external Audit firm and ask for recommendations.
However, I would suggest that you be part of whoever's presentation and follow-up with things they may have missed.
Do you currently do Security Awareness trainings for all levels of the organisation? That is do you tailor your program specific to segments of the org?
Others?????
d
