The panel discussion will explore the following questions:

• Why should I recognize that I am vulnerable to a cyber breach?
• How clearly has cyber-risk been defined, in terms of business impact, by management?
• What third-party resources are being used to validate the company’s risk mitigation on cybersecurity and data privacy? Does the board have access to these resources?
• What are some of the lessons learned from SolarWinds and Colonial Pipeline that are relevant to all businesses?
• What do Boards and companies get wrong in addressing cyber risk and assessments?
• Where should the next cybersecurity dollars be invested based on the evolving threat landscape and mitigating all risks is impossible?