Five Questions Every Board Must Answer About Cyber Risk: Professor Kai London's Test
By the Finnish Express Business Desk Professor Kai London — Founder & CEO, Quantum AI Systems Security. Credit: professorkailondon.com As cyber accountability moves onto the board, many directors are unsure exactly what they are responsible for. Professor Kai London , a senior CISO and board advisor, offers a simple test. “Every board should be able to answer five questions,” he says. “If it cannot, it is not governing cyber risk — it is hoping.” “What could break, who owns it, what it would cost, which control holds it, and where the evidence is. That is board-level cyber governance in five questions.” From delegation to accountability Modern regulation deliberately places cyber accountability on senior leadership, who can be held liable. “It has moved cyber from something the board hears about to something the board answers for,” London says. The five questions What could break? Know the critical services and their fault lines. Who owns it? Every critical risk needs a nam...