What A Board Actually Does In A Crisis
The board's job is not to manage the incident. Confusing the two makes both worse.

When something goes seriously wrong, the boundary between governance and management comes under pressure. Directors feel responsible and want to act. The most useful thing a board does in the first days is usually not what its instincts suggest.
Oversight, not operations
Management runs the response. The board satisfies itself that there is a competent response, that it is adequately resourced, and that the information reaching the board is accurate.
Boards that take over operations create a second decision-making body under time pressure, and the organization stalls while it works out which one to obey.
Independent information
The one thing a board must not accept is a single channel of information running through the executives whose conduct may be in question.
In a serious matter, the board — usually through the audit committee or a special committee — engages its own counsel and, where necessary, its own investigators. This is not a hostile act toward management. It is the mechanism that makes the board's later conclusions credible to regulators, courts and shareholders.
Preserving the record
Early steps include ensuring documents are preserved, that any automatic deletion is suspended, and that privilege is properly established over investigative work. These are unglamorous and they determine what options exist months later.
Personnel decisions
The question of whether an executive steps aside during an investigation is the board's, not management's. Deciding it early, on a stated principle, is far easier than deciding it later under public pressure.
Disclosure
For a public company, the board oversees whether and when disclosure obligations are triggered. This is a legal analysis with a clock attached, and it runs in parallel with everything else.
Afterwards
The board's final task is the one most often skipped: establishing what in the company's systems allowed this, and whether the changes made in response are real. A crisis that produces no structural change tends to recur.
This is general information, not legal advice. Speak to a qualified New York attorney before acting on any of it.