---
title: "Implement board-level cybersecurity governance."
impact: CRITICAL
impactDescription: "essential for correctness or security"
tags: cybersecurity-compliance, legal, nis2, dora, sec-cybersecurity-rules
---

## Implement board-level cybersecurity governance.

NIS2 and SEC rules explicitly require board or management body accountability for cybersecurity. Ensure regular reporting to the board, documented risk acceptance decisions, and management training on cyber risk.