Boards have a fiduciary responsibility in their governance capacity to set the tone with their vigilance and demonstrate the criticality of cybersecurity risk management.
https://www.securitymagazine.com/articles/98646-boards-supporting-cybersecurity-risk-management-and-mitigation