Leadership through first principles.
European directors now carry personal accountability under a fast-growing body of regulation.
Praevara delivers bespoke programmes that help senior leadership teams and boards lead through the legal, technological and ethical issues that now sit at board level.
Each programme starts with a confidential review of where you stand, then brings your leadership team together for expert-led, hands-on workshops. It is built for leadership teams that take governance seriously.
- 01Consultation
- 02Pre-Assessment
- 03Programme Design
- 04Workshops
- 05Report
Why Now
New rules keep arriving, and each one asks more of the people at the top. Leaders who wait for things to settle will see their personal and organisational exposure grow in the meantime.
Personal Liability
Laws such as NIS2 and DORA make the management body responsible for approving and overseeing cyber and ICT risk, and others are following. If you sit on the board of an EU subsidiary, that includes you, and NIS2 allows members to be held liable when it falls short.
Cyber Scrutiny
A serious cyber incident is now a regulatory event. Regulators will ask who decided what, when, and on what evidence.
Sustainability Reporting
Fewer companies now fall within CSRD, but those that do publish board-approved, assured disclosures. Customers and lenders are asking many of the rest for the same data.
AI Governance
The EU AI Act is already in force, yet most leadership teams cannot say where AI is used in their organisation or who owns the risk. High-risk obligations fall due in December 2027.
Health & Safety
Under Irish health and safety law, when the company commits an offence, its directors and senior managers are presumed responsible unless they can show otherwise.
This is not a seminar
It is a private working engagement for senior leadership teams and boards dealing with a growing body of regulation, from NIS2, DORA and GDPR to the AI Act, sustainability reporting and health and safety law.
We take on a small number of engagements each year, so that every programme has our full attention. Each one begins with a confidential pre-assessment that confirms what your leadership team already knows and shows what it may not. We then combine the modules that matter most into two days, delivered in person by specialists in each area.
Undivided Attention
Two days away from the office and its distractions, so your leadership team can give the work its full attention. Our primary venue is Ballinwillin House, Mitchelstown, Co. Cork.
We can also deliver at a location of your choice.
Discover the Venue
Confidential Pre-Assessment
Before the workshop, we review your documents and interview key people. It confirms what your leadership team already knows, shows what it may not, and maps your regulatory exposure and priorities.
Tailored to Your Context
Built around your sector, the rules that apply to you, and the specific challenges facing your leadership team.
In-Person Delivery
Delivered face to face at our country estate venue, at a location you choose, or as part of your own leadership off-site. There is no remote version.
Post-Engagement Report
A written report setting out who is accountable for what, our recommendations, and a prioritised plan your leadership team can track.
Duration
4–6 weeks
Typical time from pre-assessment to workshop
Participants
4–12
Senior executives and directors
Format
Two days
Minimum, always in person
The Modules
Each programme is built from nine board-level modules, delivered by specialists with direct regulatory and advisory experience.
The pre-assessment shapes your programme: we combine the modules that matter most to you into two days off site.
Where most organisations start in 2027
Priorities depend on your sector. The pre-assessment confirms the right order for you.
Industrial and operations-heavy
Services, tech and finance
Why it matters
Security
In force now, and leadership’s first exposure when an incident hits.
Data protection
Always on, and linked to every cyber incident.
AI Act
High-risk rules apply from 2 December 2027.
ESG
Revised scope from 1 January 2027, first reports in 2028.
EHS
Direct personal liability for executives.
Rankings reflect executive exposure and deadline proximity. CSRD thresholds vary by member state until transposition (March 2027).
The Experts
Our facilitators are practitioners. Between them they advise organisations and their leadership teams in financial services, critical infrastructure, the public sector and multinational business, and they bring that experience into every session.

Eoghan Kenny
Security, Privacy & Cyber Resilience
Founder of The Compliance Team, which provides outsourced Data Protection Officer services and ISO certification support, and co-founder of several governance, risk and compliance software businesses. Eoghan specialises in security, privacy and data protection strategy, operational resilience, and alignment with legal and regulatory requirements.

Lee Bristow
AI Governance, Security & Supply Chain Integrity
Lee helps organisations scale AI quickly and safely. A certified ISO 27001 and ISO 42001 lead auditor with 30 years in security and risk, he advises boards on governing and securing AI systems and their suppliers.

Roy Scott
Data Protection, ESG & EHS
Roy has led data protection, privacy, ESG and EHS programmes at global scale, and delivered them hands-on. He was Global Director of People Data Privacy at Meta and Global Chief Data Protection Officer at Flex, and held operations roles at Unilever. His ESG and sustainability work spans organisations of up to 200,000 people down to SMEs. He helps leadership teams bring GDPR, ISO management systems, ESG and EHS into line with what clients, regulators and stakeholders expect.

John Mulcahy
Strategic Bid Management & Operational Excellence
Bid management and business development professional who uses compliance and governance as a competitive differentiator. John helps organisations build regulatory alignment and operational excellence into their tendering, so that compliance becomes a reason to choose them.
Every programme draws on the whole team, so your leadership team gets practical advice on accountability, oversight and regulatory readiness from a specialist in each area.
Designed for Decision-Makers

Who it's for
Senior Leadership Teams and C-Suite Executives
The executives who own the risks and deliver the changes
Regional and EMEA Leadership
Leadership teams running the European operations of international groups, who are often also directors of the local companies
Boards of Directors and Non-Executive Directors
Directors who set strategy and oversee how the organisation is run
Regulated Entities
Organisations across Europe with cyber, data, AI, sustainability or health and safety obligations
What they gain
Reduced Regulatory Exposure
A clear view of where you are exposed under the rules that apply to you, such as NIS2, DORA, GDPR, the AI Act, CSRD and health and safety law, and what to fix first
Clear Accountability Mapping
A record of who owns each risk, from executive owner to board
Defined Oversight Structures
Committees, reporting lines and escalation routes that match what regulators expect
Inspection Confidence
A leadership team that can answer a regulator's or auditor's questions with evidence
Evidence of Oversight
Minutes, decisions and training records that show leadership is actively engaged
Competitive Differentiation
Governance you can point to in bids, audits and customer due diligence
How It Works
Every stage is designed around the time and attention of senior people: minimal disruption, maximum value.
Two days together. The groundwork is done before anyone travels.
Initial Consultation
A confidential conversation to agree what your leadership team wants to focus on
Before the programmeConfidential Pre-Assessment
Document review and interviews that confirm what you know and find what you may not
Weeks 1 to 4Bespoke Programme Design
We select the modules and adapt them to what the pre-assessment found
Weeks 4 to 5Expert-Led Workshops
At least two days, in person, led by the specialist for each module
Two days, in personBoard-Ready Report
Findings, recommendations and a prioritised plan, ready to share with your board or group
After the workshop
Typical timings. Most programmes run 4 to 6 weeks from pre-assessment to workshop.

Our Ethos
Compliance and strategy cannot be separated. A leadership team that treats governance as a compliance exercise carries risk it cannot see. One that treats it as part of strategy makes better decisions and earns the trust of regulators, customers and investors.
Our work is to close the gap between what regulators expect and how an organisation is actually governed, with discretion and precision.
Every engagement leaves leadership better able to defend its decisions, clearer about what it oversees, and treating governance as a strategic asset.
Request a Confidential Consultation
Places for 2027 are limited. Tell us what is on your leadership agenda.
Every conversation is confidential, and there is no obligation.


