One Risk, Many Entities: Board Oversight of Cyber Resilience Across a UK Group
Cyber risk rarely stops at a subsidiary boundary, yet many UK groups still oversee it entity by entity. This board-level framework covers a single risk register, clear incident escalation, supplier concentration checks and tabletop exercises that include parent and subsidiary teams.