This free Board Due Diligence Audit sample (NIS2 & the Estonian Cybersecurity Act) addresses three critical risks:
Personal financial liability through internal recourse. Documented decisions help protect a board member against claims for company fines or ransomware losses attributed to inaction.
Lack of knowledge as an aggravating factor. The sample helps document training and competence, and avoid a situation where a claimed lack of knowledge is treated as deliberate neglect.
Management bans and career risk. The audit records the board member's role in approving risk management and carrying out oversight, relevant when supervisory authorities assess management responsibilities.
