Three questions your board
hasn’t been asked.
Each one-pager gives you ten board-level questions in a specific governance domain.
Download them. Use them. If they surface something worth talking about, you know where to find me.
No email. No form. No gate.
These tools circulate best when they move freely through organisations.
If you find them useful, the most useful thing you can do is share them — with attribution.
10 Questions Every Board Should Ask About Cyber Governance
The board that asks “are we compliant?” is asking the wrong question.
These ten questions start from what your organisation cannot afford to lose —
and work backwards through the technology stack. Based on the UK Cyber Governance
Code of Practice, reframed around operational accountability rather than audit posture.
10 Questions Every Board Should Ask About AI Governance
Most AI policies sit on top of systems management doesn’t know they own.
These ten questions surface the inventory, the red lines, and the accountability gaps
— before a regulator does it for you. Anchored in the Ethical Ratchet principle:
governance that only tightens as capability grows.
10 Questions Every Board Should Ask About Data Risk
GDPR compliance is not data governance. These ten questions test whether your board
can name what data you hold, who has access to it, and what happens in the 72 hours
after a breach. Operational accountability, not documentation; anchored in the
Data Stewardship Principle.
These tools are designed to
start a conversation, not close one.
If the answers from your board reveal gaps you don’t know how to close —
or silences where you expected clarity — a Board Governance Day is how we go deeper.
One day, on-site, structured around your board composition and the risks that actually matter to your organisation. Not a workshop. Not a presentation.
A structured working session that produces decisions, not recommendations.
