ISS Proposes New Cybersecurity and AI Voting Policies
The governance firm seeks public feedback on updated oversight standards for global issuers and Canadian board diversity.
Updated on Oct. 22, 2026 in Public Companies
Live Poll
Should corporate boards be formally accountable for cybersecurity and AI oversight failures?
ISS STOXX Governance has released proposed benchmark voting policy revisions that include new requirements for cybersecurity and artificial intelligence risk oversight. These global proposals also introduce specific adjustments for Canadian executive compensation and board diversity standards.
Why it matters
Cybersecurity and artificial intelligence have emerged as material corporate risk factors, prompting the firm to treat oversight failures in these areas more strictly. The proposed Canadian policy updates aim to balance board recruitment challenges with the need for greater gender representation on public boards.
Proposed rules set a 30% gender diversity expectation for boards, which would be met by two women on a seven-member board. The transition for compensation pricing shifts from a binomial model to the Black-Scholes methodology for issuers.
The players
ISS STOXX Governance
This organization provides corporate governance and responsible investment solutions to investors worldwide.
The details
The firm utilizes benchmark voting policies to provide guidance for shareholder decisions regarding corporate management. Changes for Canadian issuers include a grace period for new S&P/TSX composite index additions to meet diversity requirements until their third annual meeting.
Timeline
Public comments on the proposed policies are open until November 4, 2026.
The firm intends to finalize the new benchmark policies in late November or early December 2026.
The finalized policies will take effect for shareholder meetings occurring after February 1, 2027.
Market Landscape
The proposed governance revisions adapt how index components satisfy diversity mandates within the S&P/TSX Composite Index listing requirements. This shift adjusts the timeline for compliance for companies newly added to the index, reflecting broader trends in corporate governance oversight.
Shareholders and issuers will see changes in how risks are evaluated and how diversity metrics are reported during upcoming proxy seasons. Investors should prepare for updated voting guidance that could alter support levels for executive compensation plans and board compositions.
The takeaway
Investors and corporate leaders should review these proposed changes to understand the new expectations for board diversity and risk reporting. Early preparation for these standards will ensure alignment with upcoming governance benchmarks effective in 2027.
What happens next
The public comment period for these proposed policy changes remains open until November 4, 2026, followed by a finalization phase in late November or early December 2026.
Further reading
For more information on corporate governance standards, visit the Public Companies section.
Live Poll
Should corporate boards be formally accountable for cybersecurity and AI oversight failures?
