The year 2024 saw significant developments in digital, cybersecurity, and systemic risk governance, with key players making headlines for their roles in shaping the landscape. While challenges persisted, a series of events and trends paved the way for sustainable change in oversight practices.
In the ongoing battle between hackers and boardroom leaders, the latter are gaining ground by embracing new governance approaches that address the evolving digital landscape. However, the war is far from over, with penalties for laggards in digital oversight expanding and institutional investors stepping up to drive governance reform.
As the importance of director expertise in digital and cybersecurity becomes increasingly clear, boards are recognizing the value of specialized knowledge in these areas. Regulatory bodies like the European Central Bank are leading the charge by mandating cybersecurity expertise on bank boards, signaling a shift towards a more proactive approach to governance.
Institutional investors are also playing a crucial role in pushing for governance reform, with initiatives like Tulipshare’s proposal for committee reform at Berkshire Hathaway highlighting the growing awareness of the benefits of effective digital governance. The NIST CSF 2.0 framework update and SEC’s cybersecurity disclosure rules are further normalizing cybersecurity risk and governance within boardrooms.
While these developments may not be revolutionary, they represent a shift towards more effective and proactive governance practices. As we look ahead to 2025, the focus on digital, cybersecurity, and systemic risk governance is set to intensify, with boards and investors alike recognizing the importance of staying ahead of evolving threats in the digital landscape.