NIS2/DORA Board Compliance Checklist

NIS2 and DORA make executives personally liable for cyber failures. Not the IT department. Not the CISO. The board. This checklist covers the 8 items your board needs in place before the October 2026 deadline: cyber committee charter, personal liability briefings, quarterly risk reporting, budget tied to risk appetite, material incident disclosure under 4 business days, third-party risk documentation, governance decision records, and legal counsel review of NIS2/DORA applicability.