Greg Touhill, who was the first person to hold the office of Chief Information Security Officer for the United States government, believes, “As AI continues to transform today’s business environment at a breathtaking pace, it is critical that CISOs provide the board with timely and relevant information that enhances the board’s governance and oversight role.”
Touhill, who is currently the Director of the Software Engineering Institute at Carnegie Mellon University, has written a chapter detailing exactly what corporate boards need to demand from management in the recently released NACD-ISA Director’s Handbook on Cyber Risk Oversight. He will expand on this model during the NACD-ISA monthly webinar, “Cybersecurity Oversight: What Boards Should Expect from a Cyber Risk Report,” on Tuesday, June 23, 2026, from 12:00 p.m. to 1:00 p.m. ET via LinkedIn Live.
The Director’s Handbook is available free of charge at:
The Tuesday webinar is the first in a monthly series that the National Association of Corporate Directors (NACD) and the Internet Security Alliance (ISA) are producing together. Each month, the webinar will focus on a different toolkit to enhance the corporate board’s role in fighting cyber risk.
On this first webinar, former General (Ret.) Touhill will be joined by ISA President Larry Clinton and Andrea Bonime-Blanc, author of the new book Governing Pandora, which is about the challenges boards and governments face in the AI era. NACD Program Manager for cybersecurity content, Dylan Sandlin, will moderate the discussion. The full schedule for the monthly webinars can be found at:
This first webinar session will focus on how boards can move beyond technical dashboards and receive decision-useful cyber risk information tied to business impact, resilience, risk appetite, and enterprise risk management.
For further information, contact Larry Clinton at lclinton@isalliance.org.