Member

Complementing that, Amendment 167, tabled by my noble friend Lady Ludford, would embed active board-level governance across all regulated entities. It would place a formal statutory duty on governing boards to approve the organisation’s cyber risk management approach, periodically satisfy themselves that appropriate, proportionate measures are actively in place and, crucially, undergo mandatory cyber security training so that directors possess the technical literacy required to assess risk and hold their IT teams to account.