The UK Government has launched a new Cyber Governance Code of Practice aimed squarely at boards and directors of medium to large businesses and charities. Its message is clear: cyber security is no longer just an IT issue. It is a core business risk that must be actively governed at the highest level.