Risk
04/10/2025

Should Boards Leave “Lazy, Stupid and Boring” Cyber Heat Maps Behind?

The metrics community bank directors use to oversee cyber risk could create a false sense of security or mask real issues. Here’s how boards can change their approach.

Kiah Lau Haslett
Banking & Fintech Editor
The way some community bank boards oversee and monitor cyber risk might be due for an update. Cybersecurity is one of the biggest threats facing banks, and a complicated topic for boards to oversee. Asking for and receiving quantifiable, contextual metrics can give directors a vocabulary that helps them better understand the possibility of different cyber incidents and how to prevent, detect and manage the fallout.  “You cannot have good risk management without good risk quantification,” says James Lam, the president of James Lam & Associates, a risk advisory firm. “Good risk management is always preceded by good risk quantification.”…

YOU HAVE ACCESSED A RESOURCE THAT IS ONLY AVAILABLE TO OUR BANK SERVICES MEMBERS.

From how-to articles, director training videos, key interviews with industry leaders and more, Bank Services provides bank executives and directors with the tools to help grow their financial institutions. To sign up for exclusive access to this online bank board resource, please contact Bank Services at 615-777-8461 or [email protected].

READ THE ARTICLE

Please enter your username and password below. If you haven’t established a password please click ‘forgot your password.’

WRITTEN BY

Kiah Lau Haslett

Banking & Fintech Editor

Kiah Lau Haslett is the Banking & Fintech Editor for Bank Director. Kiah is responsible for editing web content and works with other members of the editorial team to produce articles featured online and published in the magazine. Her areas of focus include bank accounting policy, operations, strategy, and trends in mergers and acquisitions.