Cyber incidents increasingly drive management liability exposures, with stakeholders alleging failures in oversight, disclosure, or preparedness by directors and officers following a breach. Australian guidance and commentary emphasise that boards are expected to treat cyber as an enterprise risk, with documented frameworks, tested response plans, and accurate stakeholder communications; shortcomings may trigger investigations and potential D&O claims. Some D&O policies may respond to allegations such as failure to exercise due care and diligence in cyber preparedness or misleading statements about security posture, subject to policy terms and exclusions.

Policy coordination is critical: cyber insurance typically handles first‑party response, data restoration, business interruption, and privacy liability, while D&O may address managerial oversight claims or regulatory investigations involving individuals. Coverage can be affected by cyber exclusions in D&O, conduct exclusions, or wording that narrows breach-related allegations; endorsements should be reviewed to reflect current market practice. Clear internal protocols for cross‑notifying both cyber and D&O insurers help avoid late notifications and preserve cover during fast‑moving incidents.

Governance actions that reduce D&O exposure include documenting cyber risk frameworks, aligning public statements with actual controls, minuting board oversight, and rehearsing crisis communications and legal pathways before a breach occurs. Directors should also ensure ransom decision‑making follows legal guidance and government expectations, as mishandling can compound regulatory scrutiny and litigation risk. For SMEs, building a unified playbook that maps breach scenarios to notification duties under cyber and ML/D&O can accelerate response, improve outcomes, and mitigate management liability claims.