Take a More Active Approach to Cybersecurity. Today’s cyber threats may be unpredictable—but unforced errors are preventable. By adopting a stewardship mindset to cybersecurity, you can reduce risk, improve oversight, and guide your board to smarter decisions. Here’s how to start. Make stewardship your starting point. Stewardship—a view that recognizes cybersecurity’s business relevance and acknowledges its potential strategic consequences—should guide every boardroom conversation about cybersecurity.

Read online 

Manage email preferences

Harvard Business Review | The Management Tip of the Day
 

Today’s Tip

Take a More Active Approach to Cybersecurity

Today’s cyber threats may be unpredictable—but unforced errors are preventable. By adopting a stewardship mindset to cybersecurity, you can reduce risk, improve oversight, and guide your board to smarter decisions. Here’s how to start.

Make stewardship your starting point. Stewardship—a view that recognizes cybersecurity’s business relevance and acknowledges its potential strategic consequences—should guide every boardroom conversation about cybersecurity. Use it to frame discussions, focus on strategic questions, and reinforce proactive oversight instead of reactive firefighting.

Push for broader risk thinking. Expect your cyber teams to connect technical decisions with business consequences. When they frame inaction in terms of operational, financial, and reputational risk, it raises cybersecurity to the level of board discussions.

Prioritize due diligence to reduce technical debt. Make routine assessments a habit. Identify outdated systems and deferred maintenance before they jeopardize strategy or valuation. This mindset shifts conversations from “What does this cost?” to “What will this cost if we don’t address it?”

View cyber spending as a strategic advantage. Cybersecurity is more than a cost—it protects reputation, trust, and talent. Reinforce the link between digital defense and long-term business value.

Turn board updates into learning moments. Use cyber reports to build a culture of curiosity, not blame. That shift encourages transparency and helps everyone—from staff to board—stay ahead of emerging threats.

 
Illustration of a robber running away with a bag of code.

Read more in the article

Boards Need a More Active Approach to Cybersecurity

by Noah P. Barsky and Keri Pearlson.

Read more in the article

Boards Need a More Active Approach to Cybersecurity

by Noah P. Barsky and Keri Pearlson.

Illustration of a robber running away with a bag of code.
 

New from HBR: We’re launching HBR Executive, a new suite of offerings—including a weekly newsletter, biweekly playbooks, in-depth masterclasses, live events, and more—to help senior leaders make smarter decisions and solve problems more effectively. It’s all exclusive if you subscribe. Learn more here.

 

ADVERTISEMENT

 

A tablet displaying Harvard Business Review subscription options.

Subscribe to HBR to stay ahead of what’s next

From AI to talent strategy, get the insight leaders need to navigate change and make smart, future-focused moves.

Explore subscription options

 

To Drive Innovation, Create the Conditions for Serendipity

What scientific breakthroughs can teach business leaders about engineering “aha” moments.

Read more
 

The Power of Mattering: How Leaders Can Create a Culture of Significance

by Zach Mercurio

Learn more

Don’t forget you’re entitled to 20% off your first purchase*

 

*Use promo code HBRORGREG4.
View details here.

 

 

The HBR App:
Get the best in leadership thinking on-the-go.

Download on the App Store.
Get it on Google Play