For UK non-executive directors

The easiest way into a board is through its non-execs.

Your name is on Companies House. Your board papers land in a personal inbox. And no IT team looks after your laptop. Find out how exposed you are in three minutes.

Start the 3-minute check Free. Your answers stay in your browser.
43%

of UK businesses reported a cyber breach or attack in the last 12 months.

12%

were hit by someone impersonating them in emails or online.

31%

have a board member who takes explicit responsibility for cyber security.

Source: DSIT Cyber Security Breaches Survey 2025/26, April 2026. And since April 2025, the government's Cyber Governance Code of Practice has set out what boards are expected to own.

How it happens

Becoming you can take less than an hour.

Nobody needs to hack the company. They only need to be convincing as you, to someone who wants to be helpful.

  1. Your name and your boardsAll on the public register, with your month and year of birth.
  2. Your personal emailFrom an old data breach, or the signature on a forwarded email.
  3. A lookalike addressyour.name.board@gmail.com
  4. The email above lands with financeShort, polite, urgent, and just before a board meeting.
  5. Payment sentNobody rang you to check. Why would they? It came from you.

Illustrative timeline of a common fraud pattern, known as business email compromise.

The Director Exposure Check

Eight questions. Three minutes.

Answer for yourself, across all the boards you sit on. Your result updates as you go.

  1. Inbox

    Is two-step verification switched on for the email account you use for board business?

  2. Inbox

    Do you keep board business in its own email address, separate from shopping, family and newsletters?

  3. Passwords

    Do you use a password manager, with a different password for every board portal and account?

  4. Passwords

    In the last year, have you checked whether your email addresses appear in known data breaches?

  5. Board papers

    Do your board papers stay in the board portal or company account, rather than your personal inbox or cloud drive?

  6. Devices

    Is the device you read board papers on used only by you, with automatic updates switched on?

  7. Impersonation

    Would the finance team at each of your boards ring you on a known number before acting on an urgent payment request “from you”?

  8. AI

    Do you keep board material out of free AI tools and personal chatbot accounts?

“Not sure” counts as no. It's what an attacker would assume. Two-step verification and the call-back rule carry the most weight.

See your result ↓
Free

Your full report, then one fix a day for a week.

  • Your result, explained in plain English
  • Every fix, in the order that matters most
  • Seven short emails: one five-minute fix a day
  • A one-page call-back rule to send to each of your boards

Where should I send it?

Complete the check above to include your result.

Used only to send what you asked for. See the privacy notice.

After the check

Stay protected, one step at a time.

Start free, and only go further if you need to.

Step 1

Report & 7 fixes

Free

Start here

Your result, and a five-minute fix in your inbox every day for a week.

Take the check
Step 2

Director Watch

£19 a month

A professional email address for board work, on a domain in your own name, set up and managed for you, plus a monthly exposure check. The mailbox comes from Microsoft, Google or Proton, who bill you directly, usually £6–8 a month. Cancel any time.

Start Director Watch
Step 3

Director Sweep

£295 once

An hour together on a screen share. We fix everything your check found, on your own devices and accounts, and you keep a one-page record of what changed.

Book a Sweep
Step 4 · For your boards

Board Sweep

From £1,500

Every director on one board, an hour each, and one summary for the chair. Nobody's individual answers are shared.

Send to your company secretary

Who's behind this

I'm Mícheál Gallagher. By day I run cyber security, data protection and digital operations for a national membership organisation. Before that, I put Diligent's governance software in front of FTSE and global boards. And I've sat on company boards myself for over ten years, so I know first hand how exposed an INED can be.

10+ years a board director Formerly Diligent Independent: not affiliated with the NCSC or Companies House LinkedIn profile ↗
Talk to me

Rather talk it through?

A short call, no charge. Bring your result, or just the question that's been bothering you.

Booking a Director Sweep? Pick a time here too, and I'll confirm it by email.

Or email mgallagher@ineduk.com

Privacy notice

Who. Mícheál Gallagher, trading as INED.UK, is responsible for your data. Contact: mgallagher@ineduk.com.

The check. Your answers stay in your browser. Nothing is collected unless you ask for the report.

The report. If you ask for it, I collect your first name, email address, the number of boards you sit on and your check result, to send the report and the seven emails you asked for. The legal basis is your consent, which you can withdraw at any time using the link in every email or by emailing me.

Where. Your details are kept in HubSpot, in its EU data centre, and in my business email account. Calls are booked through HubSpot Meetings. If you subscribe to Director Watch, payment is handled by Stripe, and you'll get separate terms covering your managed email and monthly checks.

How long. Until you unsubscribe or ask me to delete them. I review inactive contacts every two years.

Cookies. This page may use HubSpot analytics cookies, which you can accept or decline in the cookie banner.

Your rights. You can ask to see, correct or delete your data at any time. If you're unhappy with how I've handled it, you can complain to the Information Commissioner's Office at ico.org.uk.