When a cyber incident occurs, technical teams carry much of the immediate operational workload. But oversight of material cyber risk cannot simply be delegated. Boards and executive leaders need to know whether the organisation can identify an incident, escalate it...