Crossing The Silos In Cyber Governance
Boards are increasing cyber budgets, but resilience still depends on execution. Bobbert argues that CIO, CFO, and CISO governance must turn Zero Trust, risk quantification, and validation into one operating model.
Y · Why this matters. Y = Why: why are organisations spending more on cybersecurity while confidence remains fragile? At altitude, the first question is whether the route still fits the weather. Bobbert argues that 2026 exposes a leadership dilemma: keep the enterprise stable, while preparing for AI-enabled fraud, non-human identity sprawl, post-quantum risk, regulation, and talent scarcity.
What the article finds. Cybersecurity has become a CIO–CFO–CISO operating problem. The CIO is rewarded for uptime and architecture, the CFO for predictable spend, and the CISO for assurance and incident reduction. Each incentive is rational. Together, they can slow the work boards now need.
The article identifies three 2025 pressure points: proving business value, reducing complexity, and closing the governance gap. KPMG research, cited via SecureWorld, says 99% of leaders plan to increase cybersecurity budgets, while 53% cite a lack of qualified candidates as a high-impact challenge. Bobbert’s point is clear: more spend without better evidence creates cost inflation, not resilience.
For 2026, Zero Trust must be engineered, measured, and assured. Cyber risk quantification should use ranges and scenarios. Tool rationalisation becomes a security control. Data minimisation lowers cost, compliance exposure, and attack surface. Continuous validation turns policy into working control.
Three takeaways.
- Create a standing CIO–CFO–CISO forum for hygiene, compliance, and risk-driven investments.
- Rationalise tools and legacy systems as a security, cost, and reliability programme.
- Fund continuous validation, policy-as-code, and automated evidence as operating capabilities.
The route. This is a governance framework built from literature, market signals, prior research, and role-based operating design. Its value is the mapped route across silos: each perspective tests the next before capital, architecture, and control choices harden.
Read the original — https://www.linkedin.com/pulse/what-boards-asking-cio-cfo-ciso-response-2026-yuri-bobbert-01g0e/