In this episode of the Boardroom Conversations podcast, Andrew Penn, the former CEO of Telstra, shares his journey into non-executive director roles at Coles and the National Gallery of Victoria (NGV). He stresses the significance of open communication and clear expectations in board dynamics, especially between the Chair and CEO. Penn also offers valuable insights on cybersecurity, advocating for a proactive strategy that includes maintaining an asset inventory, implementing effective control frameworks, developing strong incident response plans, and staying adaptable to new technologies. He underscores the necessity of upskilling in cybersecurity at all organizational levels, highlighting that asking the right questions is often more crucial than having extensive technical knowledge. Lastly, he addresses the unique governance challenges and opportunities that come with leading a cultural institution like the NGV.