Check off what your current board-level security report already includes. Most reports miss more of this than they'd expect.