FREE TEMPLATE · WORD TEMPLATE
Board cyber oversight pack
A ready-to-adapt pack for the management body: legal duties, oversight structure, risk appetite, an annual calendar, KPIs and KRIs, a quarterly reporting template and a training log. It covers NIS2 Article 20, the Dutch Cbw and DORA Article 5.
What's inside
- Duties matrix for NIS2 Art. 20, Cbw art. 24 and DORA Art. 5
- Oversight RACI and escalation triggers
- Annual board cyber calendar
- KPI and KRI set with targets and tolerances
- Quarterly reporting pack outline
- Board training plan, log and minutes standard
Sections
1. Purpose and scope2. Legal duties of the management body3. Oversight structure and escalation4. Risk appetite statement5. Annual board cyber calendar6. KPI and KRI set7. Quarterly reporting pack template8. Board training plan and log9. Minutes and evidence standard10. Annual effectiveness review
How to use it
- Confirm which laws apply and delete rows that do not
- Agree the structure and calendar with the chair and company secretary
- Set targets and tolerances for each indicator
- Use the reporting template every quarter without changing its format
- Review the pack once a year in Q4
Companion guide
Same house style as every Secrato template: a start sheet with instructions, light blue cells to fill in, and version control. Free to use within your organisation. This template is practical guidance, not legal advice.
Get the template
Enter your work e-mail and we will send you a personal download link straight away. We may follow up with related guidance; you can opt out at any time.
