Insights from board cyber governance effectiveness reviews in 2025

A new 2025 report reveals a growing gap between board confidence in cyber governance and actual preparedness for a major incident.

Insights from board cyber governance effectiveness reviews in 2025, authored by Gill Collins, draws on responses from 130 directors and executives across critical infrastructure, financial services, healthcare and large not-for-profits.

While many boards report increasing confidence in their cyber oversight, the data shows weaknesses in the areas most likely to determine outcomes during a crisis.
Response Readiness recorded the lowest result of the six SECURE framework domains, with only 44% favourable results. Fewer than half of boards actively oversee and challenge incident response plans, and just 30% participate in comprehensive annual cyber simulations.

Gaps were also identified in evaluation, metrics, culture and education — raising important questions about directors’ duties of care and regulatory expectations under the Corporations Act.

This report provides a clear snapshot of where Australian boards stand in 2025 — and what stronger cyber governance requires.

To download the report please complete the form below and a pdf copy will be emailed to you.