Governance & Compliance, episode 3: UK Cyber Governance Code of Practice

Many companies are adapting their governance and reporting processes in response to the UK’s new Cyber Governance Code of Practice. In this episode, we explain some of the main implications for board directors and in-house legal teams. It’s often said that there are two types of companies: those that have been hacked and those that are going to be. With cyber threats constantly evolving and escalating, the Department of Science, Innovation and Technology this year issued the UK Cyber Governance Code of Practice. For this latest episode of our UK Governance & Compliance mini-series, we’ve gathered a team of experts to answer the questions that directors and in-house legal teams are asking. These include: How does the code work in practice? What actions are required to comply with the Code? Where should directors start? What role should legal teams play in incident planning and response? What guidance is available? What part does training have to play? And, looking ahead, how likely is the Code to become a mandatory regulatory requirement? Joining Ashurst’s Will Chalk to discuss these issues (and more) are Rhiannon Webster, Ashurst's UK head of data protection and cybersecurity, and Rachael Falk, a partner in Ashurst’s Risk Advisory team in Sydney, Australia. To listen and subscribe to future episodes in our governance and compliance mini-series, search for ‘Ashurst Legal Outlook’ on Apple Podcasts, Spotify or your favourite podcast player. And to find out more about the full range of Ashurst podcasts, visit ashurst.com/podcasts. The information provided is not intended to be a comprehensive review of all developments in the law and practice, or to cover all aspects of those referred to. Listeners should take legal advice before applying it to specific issues or transactions.See omnystudio.com/listener for privacy information.