1.Rate your knowledge of cybersecurity in general

None

Basic

Moderate

Good

Expert

None

Basic

Moderate

Good

Expert

2.How often is Cybersecurity discussed at Board Meetings?

Not applicable

Rarely

Only when there is a Cybersecurity project

Only when there has been a Cybersecurity incident

Cybersecurity is a permanent topic at all Board meetings

Not applicable

Rarely

Only when there is a Cybersecurity project

Only when there has been a Cybersecurity incident

Cybersecurity is a permanent topic at all Board meetings

3.How would you like Cybersecurity to be discussed at a meeting, as a current or prospective Board Member?

In technical terms

In general terms

Other (please share)

4.In order to take the right decisions, what kind of metrics would you expect your Chief Security Officer (CISO) to keep you informed of?

Level of Preparedness

Number of intrusion attempts

Mean Time to Detect (how long does it take for intrusions to be detected)

Your organisation's Security rating

Other (please share)

5.How would you define your appetite for cyber risks?

Risk Seeking

Risk Neutral

Risk Pareto (an individual who believes that 80% of gains comes from 20% of risks)

Risk Adverse

6.Do you think Cybersecurity is:

A business risk

An IT problem

Both