Provision of training on cyber security risks for the Board of Directors