Why Cybersecurity Is Now a Boardroom Priority—And What It Means for Your Business

Jan de Vries · 2026-10-13

By Michele Centemero Whether I'm talking to a retailer in Italy, a fintech founder in London, or a bank in Germany, I keep hearing the same question in different forms: How can we keep innovating and moving faster without putting our business and customers at greater risk? It's a fair concern. Across Europe, companies are investing in new tech, embracing AI, and finding fresh ways to serve customers—all while dealing with changing regulations, rising expectations, and more sophisticated threats. The ambition is there. What's harder to find is the confidence to act. ### Cybersecurity Is No Longer Just an IT Issue For years, cybersecurity was seen as the IT department's problem. That view is outdated. A cyber incident can stop operations cold, disrupt customer relationships, and damage trust built over decades. Today, cybersecurity is discussed not just in server rooms but in boardrooms. Recent Mastercard research found that 93% of European organizations have experienced fraud or attempted cyberattacks in the past year, with a third (32%) saying those attempts are becoming more frequent. But those numbers only tell part of the story. What sticks with me is the uncertainty behind them. Leaders know they need to act, but it's not always clear where to start, which risks demand immediate attention, or whether their investments are making a real difference. Seven in ten (69%) business leaders say measuring the success of cybersecurity investments is challenging. Similar numbers report difficulties integrating security measures with legacy systems and managing AI-enabled attacks. ### Rethinking How We Talk About Cybersecurity That's why we need to change the conversation. The goal can't be to eliminate every risk—no organization can promise that. Instead, businesses need the confidence that comes from understanding their exposure, preparing for disruption, and knowing how to respond when something goes wrong. What encourages me is that many organizations are already shifting their approach. One in three European business leaders say that as they increase their use of technology, they're broadening their cybersecurity priorities. These include real-time monitoring and incident response, supplier risk management, and compliance with evolving AI regulation. These aren't just technical decisions—they're decisions about protecting a business's ability to operate, innovate, and keep customer trust. ### The Power of Collaboration These decisions can't be made in isolation. No business operates alone anymore. Suppliers, technology providers, payment partners, and service providers all play a role in keeping businesses and customers safe. A weakness in one part of the network can have ripple effects across the rest. That's why third-party risk management is becoming such a priority for business leaders. Many European leaders also recognize they don't have all the answers in-house. The best partners help businesses make sense of a changing landscape, spot emerging risks sooner, and respond with greater confidence. At Mastercard, we've learned that resilience grows through collaboration. Our European Cyber Resilience Centre brings businesses together with governments, regulators, and law enforcement to share intelligence and strengthen collective defenses. We continue to invest in technologies and partnerships that help organizations understand cyber risk and respond to emerging threats. ### Leadership and Culture Matter Technology matters, but technology alone will never be enough. Resilience also depends on leadership, clear accountability, and a culture where security is part of everyday decision-making. Boards should be asking not only whether their organizations are protected, but how risk is measured, how quickly the business could recover, and what a serious incident would mean for customer trust. > "Cybersecurity is no longer a cost center—it's a cornerstone of business resilience." In today's digital economy, confidence comes from preparation, collaboration, and a clear-eyed view of risk. That's how businesses can innovate boldly while keeping trust intact.