oards are under growing pressure to oversee AI, with many actively working to identify the right tools, metrics, and expertise to do so effectively. While AI offers transformative opportunities for growth and productivity, it also introduces new and rapidly evolving risks, from security and bias to operational and reputational exposure. During a recent panel discussion, McKinsey and the National Association of Corporate Directors (NACD) gathered top chief information security officers (CISOs) and board directors, highlighting four priorities for effective oversight: strengthening governance and accountability, balancing innovation with risk, building real-time risk-management capabilities, and improving AI fluency in the boardroom. Together, these shifts signal that AI is no longer just a technology topic; it is now a core enterprise risk and strategic differentiator

Full panel discussion : Leading cybersecurity executives and board directors discuss the challenges and opportunities of AI.