Defending the cyber spend at board level. What NIS2, DORA, CRA and the Cyber Security and Resilience Bill mean for governance.
An invite-only roundtable of senior leaders from large UK enterprises. Chatham House Rule. Peer-level exchange.
If you'd like to be part of the conversation, please share a few details. Each request is reviewed by Dom personally to ensure peer-level balance at the table.
All fields marked with a dot are required. We'll confirm within 24 hours.
"Boards of directors are becoming increasingly accountable for cybersecurity governance. You are already investing enough in technology to support compliance, but the spend is not always aligned with the areas that matter most to your business.
Often, the real challenge is not whether enough is being spent, but whether the organisation can clearly justify why resources are being directed where they are, and defend that position at board level."
Senior management can now be held personally liable. Fines reach €10M or 2% of global turnover. The window for unprepared boards is closing.
In force across the EU since October 2024. Cybersecurity governance for "essential" and "important" entities, with personal liability for senior management and fines up to €10M or 2% of global turnover.
Active since January 2025. ICT operational resilience for all EU financial entities, including mandatory third-party risk register, incident reporting, and threat-led penetration testing.
Adopted October 2024. Cybersecurity rules for products with digital elements such as hardware, software, and IoT. Security-by-design and mandatory vulnerability disclosure. Fines up to €15M or 2.5% of global turnover.
The Cyber Security and Resilience Bill, expanding scope to managed service providers and critical supply chain. The UK equivalent of NIS2 for British organisations.
An external moderator opens the floor. Three to four themes. Lunch and 1:1 follow, then drinks open upstairs at 18:00.
Epitechnic is an AWS Advanced Partner with Security Specialisation, working with executive teams at large enterprises across the UK and EU on cybersecurity governance, AI and cloud regulation, and operational resilience.
We focus on the conversation most consultancies skip: not whether enough is being spent on cyber, but whether the decisions can be defended at board level, in financial terms, and under regulator scrutiny.