In recent years, with the increased use of information technology, cybersecurity has gained a central place in corporate security strategies, overcoming the traditional perception of cybersecurity as a strictly technical issue. This paper examines cybersecurity through the prism of corporate law, focusing on directors' duties of care and oversight as fundamental aspects for maintaining sustainable corporate security system. Special attention is devoted to the role of the board of directors in identifying, assessing, and managing cyber risks. Through an analysis of relevant academic literature, legal regulations, and case studies, the paper demonstrates that insufficient board oversight, inadequate risk reporting, and weak integration of cyber risk into corporate decision-making processes can cause multidimensional consequences for the company's reputation. The analysis shows that even though corporate law does not provide norms regarding cybersecurity issues, it establishes clear procedures and norms regarding informed decision-making, oversight, and risk recognition. In this sense, the paper concludes that the responsibilities of directors under corporate law represent the most important element in preserving corporate values, the trust of stakeholders, and in the preserving corporate security resilience.
Aleksandra Nikolova-Marković (Wed,) studied this question.