Distributing Ownership of an Organization’s Cybersecurity Risks

This article presents insights from AkzoNobel’s Global CISO on how growing regulatory demands (e.g., EU NIS 2, US SEC rules) elevate cybersecurity to an enterprise-wide responsibility, emphasizing structured governance, board communication, and a people-process-technology framework. It highlights the need to articulate exposure surface, risk indicators, and KPIs to non-technical leaders, and recommends focusing CISO efforts on establishing a robust governance model and executing a security program aligned to international standards, with clear roles, independence, and authority.