
Across Southeast Asia, cyber risk is now a boardroom topic. Regulators, investors, and executive leadership teams increasingly treat cyber incidents not as technical failures, but as matters of enterprise governance, resilience, and accountability.
As expectations rise, many organisations face a persistent challenge. While cyber risk is widely understood, ownership and governance are often unclear, especially when accountability is under regulatory, legal, or post-incident scrutiny. The SEC’s July 2023 final rules under Regulation S-K Item 106 now require public companies to describe board oversight and management’s role in assessing and managing cybersecurity risk.
In Singapore, Phase 2A of the Financial Services and Markets Act 2022 commenced on 10 May 2024, implementing new technology risk management provisions and empowering MAS to impose harmonised technology and cybersecurity risk requirements across all financial institutions.
Globally, the fifth edition of the NACD-ISA Director’s Handbook on Cyber-Risk Oversight reinforces the same expectation, providing boards with an independently validated framework for cyber risk governance built on six oversight principles. The direction is consistent: cyber risk governance is a leadership accountability, not a technical function.
Also read: Cybersecurity strategies for startups on a budget
The auditability gap
Despite increased awareness, many organisations continue to manage cyber risk through fragmented structures. Boards receive dashboards rather than decision-grade evidence of who decided what, against which risk appetite, and with what compensating controls in place.
This is the auditability gap: not a lack of controls, but a lack of defensible governance evidence. It is a challenge playing out across industries where the stakes are especially high, from banking and financial services to manufacturing and the EV and mobility sector, where cyber risk intersects directly with business continuity, safety, and regulatory compliance.
In financial services, institutions are under pressure to demonstrate technology risk governance. In manufacturing, IT/OT convergence has expanded exposure and governance complexity. In the EV and mobility sector, software-defined and connected environments introduce cyber risks with real-world legal and safety implications.

Regional expansion plans
Against this backdrop, Cybersense Solutions today announced the launch of its Southeast Asia operations, establishing Singapore as its regional base. Thailand also has been selected as the firm’s first expansion market, driven by demand from manufacturing-led industries, a growing EV ecosystem, and an evolving cybersecurity regulatory landscape.
“Most organisations already understand where their vulnerabilities are,” said Adrian Harris, Regional Managing Director, Cybersense Solutions. “The issue is rarely awareness, it’s ownership. Decisions around cyber risk are frequently deferred because accountability sits between departments, between legal and IT, between the board and the operations team. Cybersense exists to close that gap: to give organisations a single partner that can take responsibility for turning risk awareness into structured, defensible action.”
Also read: Supply chain attacks are becoming SEA’s new normal
Governance-first approach
Cybersense’s establishment reflects a growing shift toward governance-first cyber risk management. Its engagement model integrates cybersecurity operations, regulatory compliance, operational resilience, and legal defensibility with a single focus: turning cyber risk from known to governed, accountable, documented, and defensible. The emphasis is on outcomes that hold under scrutiny, including clearer accountability structures, audit-ready artefacts, and structured incident readiness, rather than technology procurement.
As organisations operate in increasingly interconnected and regulated environments, the ability to govern cyber risk with clarity, consistency, and defensibility is becoming a defining leadership requirement.

—
Want updates like this delivered directly? Join our WhatsApp channel and stay in the loop.
Cybersense Solutions sponsored this article
We can share your story at e27 too! Engage the Southeast Asian tech ecosystem by bringing your story to the world. You can reach out to us here to get started.
Featured Image Credit: Cybersense Solutions
About Cybersense Solutions
Cybersense Solutions Pte. Ltd. is a Singapore-headquartered cybersecurity firm with a presence across ASEAN. We combine legal and technical expertise to help organisations accelerate audit readiness, strengthen incident preparedness and reduce exposure from common attack paths.
The post When cyber risk becomes a board responsibility, governance matters more than tools appeared first on e27.




