- 26 October 2026
Recent headlines about the cyber security threat to millions of websites framed it as a technical issue, but our members know this is a governance problem.
Organisations around the globe had to make rapid decisions about whether to take websites down for a fix, which translated to lost revenue and users losing access to vital services.
These problems reach the board and governance professionals are there to guide and advise on questions such as who decides whether a website comes offline, and on what basis?
In our Boardroom Bellwether survey of governance professionals, launched this week, the findings on cyber preparedness were concerning, particularly from the charity and not for profit sector.
More than four in ten respondents told us that their board had little or no preparation for a cyber-attack.
This annual survey was traditionally aimed at those working with corporate boards, but this year we received responses from more than 300 governance professionals employed across listed companies, private businesses, charities and the public sector.
This provides a fascinating insight into the leading issues facing our members, such as the influence of AI. Only 6.5% of respondents overall rated their board’s capability to oversee AI as strong. Yet 69% identify AI as one of the areas where their organisation most needs to strengthen its governance capability, rising to 82% among listed companies.
Comments included anxiety about the sharing of confidential information with “insecure bots” and that “AI risks and especially the security-related risks are significantly under-estimated.”
What is clear from the survey is that governance professionals are under strain. Around four in five say the governance issues facing their organisation increased in the past year, with only one in ten saying their function is very well resourced.
As one respondent put it: "The challenge today is time. Getting the right people the right information on which to base decisions is one thing. Getting them the time to discuss and understand the perspectives of others so they can make good decisions is quite another."
Modernising Corporate Reporting
Into this landscape comes the government’s consultation on modernising corporate reporting. The survey reveals that only one in seven respondents have any confidence in the government’s regulatory reform agenda. The findings also show clear support for proportionate regulation. Confidence can be built and will grow if the reforms are grounded in the practical reality of reporting and compliance.
Our policy team is continuing to meet with members on this issue, and the Institute is preparing a formal response before the consultation closes on 30 November. Please take the opportunity to give your views.
Celebrating our profession
Our ability to effect change depends on members sharing their thoughts on the future of the profession, and on recognising the breadth and diversity of talent that it contains.
Earlier this month I attended the Black Excellence in Governance Awards at the European Bank for Reconstruction and Development. The winners’ achievements were impressive, and the evening reminded me of how visible role models are so important to people considering a career in governance. I look forward to seeing many of you at our own awards on 3 November where we will celebrate professionals across every sector.
Cyber preparedness
Finally, the Bellwether report highlights how the governance professional’s role is widening into AI, cyber and reporting faster than capacity is growing.
Our qualification needs to support professionals in navigating these areas, and we are working with the Institute’s Global Council to make sure that it does.
Next year we will be sharing more information about how our chartered qualification is evolving and that will include a focus on technology governance and cyber risk.
Boards will continue to be challenged by new risks, technological or otherwise. It is our role to make sure our members are ready to guide them.