Readers of this journal may have noticed an increased focus on technology issues in the training and thought leadership services provided by our Institute. This new focus can also be seen in the pages of this journal and this month’s edition of CGj is a special technology edition that will be useful to members in keeping up to date with many frontier issues in tech governance.

Our first cover story this month addresses an issue that needs to be high on the agenda of boards in the current operating environment– cybersecurity. Given the high probability of cyberattacks facing organisations of every kind, the role of the board and members of our profession in building effective cybersecurity governance frameworks has come under increased scrutiny.

Do cybersecurity risks and opportunities get sufficient attention from the board? Should boards be looking to increase the technical expertise it has on these matters? Should boards have a cybersecurity committee? These and other questions relevant to cybersecurity are the subject of our Institute’s latest research project. In collaboration with PricewaterhouseCoopers, we conducted a survey earlier this year assessing the robustness of cybersecurity governance frameworks in the region. Look out for the resulting report soon to be published on our website.

As you would expect, both our research report and cover story this month have a particular focus on the roles of governance professionals
in this space. Members of our profession are increasingly relied upon to advise directors on tech risks and opportunities, and to help build effective frameworks to ensure that organisations can minimise those risks and maximise those opportunities.

While this work is a relatively new addition to the governance professional function, it will be an increasingly critical part of the value we bring to the organisations we work for. Our Institute is committed to do its part to ensure our members are not blindsided by tech issues. In addition to the research report mentioned above, we have also been increasing the number of tech- themed CPD events and guidance notes we offer. Indeed, our second cover story this month reviews the four guidance notes produced by our Technology Interest Group in 2023. Along with cybersecurity, these guidance notes address the responsible deployment of AI tools and Hong Kong’s new licensing regime for virtual asset service providers.

In conclusion, I would like to emphasise that we, as governance professionals, don’t need to be tech experts. Nevertheless, many tech issues are front and centre when it comes to the work we do. Firstly, we need to provide the board with advice and quality information on the growing body of legislation and regulation relating to relevant tech issues such as data protection and cybersecurity. But secondly, we also need to stay up to date with the ethical and social issues relevant to the evolving digital ecosystem.

Rest assured, our Institute will continue to do its part in preparing members for their expanded roles in tech governance.