The recent breach of a major credit bureau has raised serious questions about whether boards of directors and senior management are asking the right questions about actions their organizations are taking to protect themselves from cyberthreats. For boards and executive teams everywhere, this episode serves as a stark reminder of the importance of understanding the company’s cybersecurity strategy and tactics to pinpoint whether they know what they need to know.

This article reviews the Equifax case and provides questions the board of directors may want to consider regarding the nature of the entity’s risks inherent in its operations.