The NCSC published its Guidance on Cyber Governance for Management Board Members in NIS2 entities in July. The guidance is a timely reminder that cybersecurity is no longer solely an operational or IT issue: management boards are expected to actively oversee cyber risk and may face significant consequences for non-compliance.