ESG Greenwashing, Board Cybersecurity, and the Value of Board Assessments

We often talk about the importance of information security related to board work. We collectively nod our heads in agreement thinking,“Yes! Of course, information security is at the top of our list of priorities.” 

Then, the next board meeting rolls around, and so many organizations continue to use email, cloud file storage systems, and over-the-counter messaging services to do this work. And then, we wring our hands and palm-slap our face when we see stories like this one.

In May, a disgruntled former employee of a Brooklyn-based credit union used her credentials to access and delete over 21GB of company and customer data – including recent board minutes – in an effort to get back at her employee. (We should note that the hundreds of OnBoard credit union customers can rest easy, knowing their board data is well-protected from threats like this).

This should not have been possible. The unfortunate reality is too many organizations – large and small – rely on fragmented, unsecured technology to manage their board communication. 

All too often we hear the excuse that goes something like this, “We use email and cloud storage solutions to manage our documents and communications. Our board is not tech-savvy and they’re resistant to change, so we can’t make the switch.” Hogwash, we say. This is a weak and uncourageous argument. 

The stakes are too high for boards of any organization, large or small. What’s more, the technology today – notably OnBoard – is too intuitive, simple, and powerful, the excuse that there is a technical deficiency among board members is garbage. 

If your board can send an email, send a text message, or access a website via a browser or device, they have the technical aptitude to master a modern board solution like OnBoard.