If your board cannot get clear answers on ransomware resilience, recovery readiness, and supply chain exposure, that silence is itself a material risk.
Original source: Halcyon