Although well aware of the threat posed by hackers and organized cybercriminals, an alarming number of Boards are not actively challenging management’s cybersecurity efforts. Often, Board members simply don’t know how to proceed. However, there are concrete actions that Directors can take immediately to carry out their governance duties and improve cybersecurity.