Over 68% of senior leaders do not have a board-approved AI policy to oversee and guide staff use of artificial intelligence, a survey by the Institute of Directors (IoD) has found.
A further four in 10 (41%) are not aware of their own personal liability for severe organisational non-compliance with cybersecurity rules under EU’s NIS2 directive to be implemented imminently.
“In today’s rapidly evolving digital landscape, the board plays a crucial role in governance by providing strategic oversight, ensuring accountability, and guiding the organisation’s direction in alignment with regulatory obligations such as NIS2,” said Caroline Spillane, CEO of IoD.
“The cyber resilience of an organisation is ultimately down to its staff, but also can be impacted by its supply chain and/or third-party suppliers.
“The mitigation of this through effective oversight in cyber security and AI policies and procedures is essential, with our research finding that nearly one in three members have experienced a cyber security attack within …