Boards should engage with security strategy as it is forming. Strategy, is an area where the diverse experiences and pattern-recognition skills of experienced directors enable them to add significant value. But that’s only possible if they’re participating early in the formation of strategy and testing it along the way
This shifts the board’s attitude from reactive to proactive and can help with a degree of expertise into the boardroom.
Directors have long assumed responsibility for selecting and replacing senior officers, both in the normal course of business and in “replacement” scenarios. It would be good if tracked succession and promotion too.
Another way to enhance board engagement is to assign directors specific operational areas to engage on. Board members can assume roles in specific security initiatives, such as major projects and compliance, secure technologies, or risk management of security threats.