What is the Cyber Governance Code of Practice?

The Cyber Governance Code of Practice (the Code) has been created to support boards and directors in governing cyber security risks. The Code sets out the most critical governance actions that directors are responsible for.

The Code forms part of the government’s free package of support on cyber governance and should be the first point of reference for board members. It is underpinned by Cyber Governance Training, which helps boards and directors to strengthen their understanding of how to govern cyber security risks, and the Cyber Security Toolkit for Boards, which supports boards and directors in implementing the actions set out in the Code.

• The Cyber Governance Code of Practice sets out what actions boards need to take.
• The Cyber Governance Training confirms why and how board members take those actions.
• The Cyber Security Toolkit for Boards underpins the two, further supporting directors and board members.