Aon Cyber Webinar

Data, Technology and Boardroom Accountability: Key Takeaways from the Aon and Intercept Webinar

Cyber risk is no longer just an IT issue. That was one of the clearest messages from the recent Aon and Intercept webinar, where thought leaders discussed the growing data and technology threats facing companies in Ireland.

The discussion highlighted how Irish businesses are operating in a more complex cyber environment, including the rise of hybrid cyber warfare. This is not only a concern for governments or large multinationals. It is increasingly being experienced by companies across Ireland through cyberattacks, supplier disruption, ransomware, data breaches and operational risk.

A key theme from the webinar was the role of the board. Directors and senior leaders are now expected to understand cyber risk, ask the right questions and ensure their organisations are prepared. Cybersecurity is no longer something that can sit solely with IT. It affects reputation, regulation, customer trust, insurance, business continuity and, increasingly, personal accountability.

Third-party risk management also took centre stage. As Intercept noted during the session, data controllers “cannot transfer their liability” by outsourcing. This is a critical point for firms relying on external providers, cloud platforms, managed services or data processors. Outsourcing a function does not mean outsourcing responsibility.

For companies, this means supplier oversight must be more than a procurement exercise. Boards need to know which third parties handle sensitive data, what controls are in place, how breaches are reported and whether contracts clearly address security responsibilities.

The webinar also reinforced the importance of having appropriate technical and organisational measures in place for when “a breach does happen”. That wording matters. Firms must move from hoping an incident will not occur to preparing for how they will respond when it does.

Technical measures may include access controls, encryption, monitoring, secure backups and vulnerability management. Organisational measures are equally important, including incident response plans, escalation procedures, staff training, supplier governance and board reporting.

The overall message from Aon and Intercept was clear: cyber resilience is now a boardroom responsibility. Irish companies must be able to show that they understand their risks, have taken reasonable steps to manage them and are prepared to respond when incidents occur.

In today’s environment, good cyber governance is not just about preventing attacks. It is about accountability, resilience and trust.

‍