The recent corporate governance update from ASIC serves as a cautionary message to company directors, emphasizing the serious consequences of ignoring cyber risks. The article highlights ASIC’s concerns regarding board directors and executives who may be unprepared for potential cyberattacks. It stresses the need for companies to prioritize both the security of their systems and processes, as well as strategic planning in response to any cybersecurity incidents. In this context, ASIC emphasizes that it is incumbent upon directors to ensure robust management practices are in place regarding cybersecurity risk. Failure to do so could potentially result in non-compliance with their duty of care and diligence, which may expose them to enforcement actions by ASIC.
