Regulators Holding Boards Personally Liable for Cybersecurity Failures
Board cybersecurity liability is now personal, enforceable, and global. NIS2 makes directors individually accountable for approving, overseeing, and being trained on cybersecurity measures — with liability extending to any compliance failure, not just gross negligence. See the regulatory framework, trigger points for personal sanctions, and five actions for directors to protect themselves and their organizations.