You can’t delegate leadership in a crisis. 

That was one of the most powerful takeaways from our recent Cyber Resilience for Directors and Senior Leaders session. A half-day, NCSC-assured course designed specifically for the people who carry ultimate accountability when a cyber incident hits. 

Many leaders tell us they know cyber is critical. But they haven’t always had the space to explore what that responsibility really looks like. This course provides that space and prompts some tough but vital questions. 

Here are five key lessons that consistently emerged: 

1. The pressure is rising  

The proposed Cyber Security and Resilience Bill is a wake-up call for boards. Directors are increasingly being held responsible for how organisations prepare for, respond to, and recover from incidents. 

This course gives leaders space to explore what that responsibility really looks like, and to ask tough but essential questions: 

• Who makes the call when systems go down
• What’s the plan if we lose access to critical data?  
• How do we protect people, customers, and operations while meeting our legal duties? 

The session offers not just legal and regulatory insight, but the strategic framing needed to lead, not just react.  

2. Scenario-based learning breaks down assumptions 

Cyber security often starts with technology…firewalls, patches, antivirus, but it ends with people making high stakes decisions under pressure. 

Cyber resilience is built through lived experience. That’s why participants work through real-world simulations, exploring the decisions leaders must make during a crisis. 

In our ransomware simulation, we saw assumptions challenged and blind spots exposed, not from a technical perspective, but from a leadership one. It was revealing. Assumptions were challenged. Gaps emerged. One attendee described it as “helpful… but scary.” That’s exactly the point. Practising now means being calmer, clearer and faster later. 

 3. You can’t outsource leadership 

In a crisis, it’s not just stopping the breach that matters. It’s also keeping the business moving, earning stakeholder trust, and making decisions you can stand by. Technical controls matter. But when a breach hits, it’s the board, not the IT team, answering to regulators, customers and the press. 

What emerged clearly in our discussions is that leadership confidence comes from culture. The best defences start with frontline awareness, reporting habits, and clear decision-making chains. This course helps attendees move from a compliance mindset to one of strategic resilience.

4. Governance isn’t optional  

The course introduces leaders to the Cyber Governance Code of Practice, helping them understand how to align cyber strategy with broader organisational goals and legal duties. Strong governance means directors can articulate risk in business terms, align investment decisions with organisational risk appetite, and satisfy stakeholders; from customers and partners to regulators, that cyber resilience is taken seriously.   

5. Collaboration across functions unlocks strategic resilience 

Cyber resilience isn’t something that exists in a vacuum. The organisations that benefit most from the course are those that bring together leaders from strategy, risk, IT, operations and compliance. This cross functional engagement prepares leadership teams to act as one when cyber incidents occur, instead of struggling with silos and confusion. 

What leaders walk away with 

By the end of the session, participants feel better prepared to: 

• Lead cyber strategy and investment decisions with clarity 
• Understand their board level responsibilities and stakeholder accountability 
• Challenge assumptions and weak controls confidently 
• Speak articulately with regulators, customers, insurers and partners 
• Embed a culture of cyber resilience throughout their organisation 

Cyber Training Courses

Our courses range from foundational cyber hygiene to advanced technical skills, all designed for real-world application. Each programme blends expert insight with hands-on learning. We work with industry to make sure every exercise reflects real-world challenges, so your team are ready with the skills, confidence and mindset to respond effectively.