Cyber Incident Response Governance Assessment

Cyber Incident Response Governance Assessment

Boards believe their Cyber Incident Response Plan is ready - until an incident exposes where it isn't.

A policy exists. An IT provider is engaged. Insurance is in place. None of that answers the question that decides how an incident goes: can the board see who holds authority, when escalation happens, how notification decisions are made, and what record is kept?

This assessment gives Chairs, CEOs, Directors, Company Secretaries, CFOs and Risk Leads a structured, board-level read on whether cyber incident response is being governed with enough clarity - and a reasoned conclusion on what, if anything, to do next.

What it covers

Ten questions across three areas:

1. Board visibility, authority and escalation
2. Notification, external parties and communications
3. Framework use, recovery and decision records

What you receive

• A completable Cyber Incident Response Governance Assessment (PDF with response fields)
• An interpretation of the gaps and uncertainties identified in your responses
• A reasoned conclusion, including whether any further action is needed
• A one-page summary you can share with the Chair, CEO or Company Secretary, or table at a board meeting

This is for your board if

• your CIRP has been approved but rarely tested
• directors are unsure when a cyber incident becomes a board matter
• decision rights for the CEO, incident lead and board are unclear
• notification obligations rely on judgement rather than a defined pathway
• insurer, legal, forensic or vendor escalation paths are not current
• incident records would be hard to reconstruct after the event

Prefer to pay by EFT or purchase order? Email liam@northseat.com.au and we’ll arrange it.