Given the heightened level of threats in these times, boards and leaders must do more than provide oversight of an organization’s cybersecurity. But many boards have yet to apply the same level of scrutiny to their own security. This article provides an evaluation framework for directors and senior management: