Boards Increase Oversight of Global Cyber Risks
A new survey highlights rising board engagement and cyber insurance adoption in response to digital threats.
Updated on Oct. 21, 2026 in Cybersecurity
Live Poll
Do you trust that most corporations are sufficiently prepared to handle modern cyber risks?
The 2026 Directors' & Officers' Liability Insurance Survey from Willis shows that 70% of organizations now integrate cyber risk into their enterprise risk frameworks. Boards are increasingly treating digital security as a core business risk that demands ongoing oversight and accountability.
Why it matters
Organizations are prioritizing cyber resilience to minimize business disruption, with many boards now receiving regular updates on security spending and potential financial impacts. This shift reflects a move toward treating cyber risk as a central component of high-level strategic management.
While 65% of boards receive cybersecurity updates quarterly, only 41% of respondents quantify potential financial losses on an ongoing basis. Additionally, 48% of surveyed organizations currently hold cyber insurance, with 71% of those opting for standalone policies.
The players
Willis
Willis is a global insurance broker and risk management firm that publishes research on corporate liability and risk trends.
The details
Organizations are leveraging cyber insurance as a key tool for financial protection and access to specialized incident response teams. Data indicates that 62% of respondents completed cyber incident response testing in the past year to ensure operational readiness.
Timeline
The 2026 Directors' & Officers' Liability Insurance Survey was published in 2026.
Cyber incident response testing exercises were completed in the previous 12 months.
Additional organizations plan to purchase cyber insurance within the next two years.
The Tech Race
This evolution in governance follows the 2026 Directors' & Officers' Liability Insurance Survey which benchmarks how global corporations now treat digital defense as a standard fiduciary duty. This systemic shift moves companies away from reactive IT-only responses toward proactive board-level enterprise risk management.
The push for higher insurance adoption and formal response testing means that employees and stakeholders may face more rigorous internal security protocols. These measures aim to standardize incident recovery and reduce the potential for financial disruption within the organizations people rely on.
The takeaway
Effective cyber risk management now relies on consistent board engagement rather than isolated IT department efforts. Companies that formalize their response testing and financial quantification are better positioned to weather the rising frequency of digital security incidents.
Further reading
For more information on the evolving threat landscape, visit the Cybersecurity section.
Live Poll
Do you trust that most corporations are sufficiently prepared to handle modern cyber risks?
