Governance

Board reporting on cyber risk: moving beyond heat maps

Boards are asking for quantified, comparable and decision-useful cyber risk reporting. We outline a practical model that works in mid-market organisations.

2 April 2026 · 6 min read

This is a summary preview of the article. Full editorial content will be published progressively as our practitioners release new analysis. Please contact the AACL practice for early access to the working paper or to arrange a briefing on the subject.

Boards are asking for quantified, comparable and decision-useful cyber risk reporting. We outline a practical model that works in mid-market organisations.

Our consultants regularly publish on the intersection of governance, technology and regulation across East Africa's most demanding sectors. To be notified when new analysis is released, please write to info@aacl.co.ke.

WhatsAppSignalThreemaCall now