Maintaining firewalls, protecting servers and filtering malicious emails rarely make it onto the board agenda: these issues tend to be delegated to the company’s IT security experts. But in the face of continuous and increasingly complex cyber attacks, boards of directors are under growing pressure to pay closer attention to cyber security. This paper looks at cyber security’s elevation to the boardroom. It considers the nature of the threat faced by business and offers practical advice on what board directors need to know.