Why Cybersecurity Is Now a Boardroom Priority

Jan de Vries · 2026-10-13

### The Question Every Leader Is Asking Whether I'm talking to a retailer in Italy, a fintech founder in London, or a bank in Germany, I keep hearing the same question in different accents: How do we keep innovating and moving faster without putting our business and customers at greater risk? It's a fair concern. Across Europe, companies are pouring money into new tech, embracing AI, and finding fresh ways to serve customers. But they're also juggling changing regulations, rising expectations, and increasingly sophisticated threats. The ambition is there. The confidence? Not so much. ### Cybersecurity Is No Longer an IT Problem For years, cybersecurity was tucked away in the IT department. That view is outdated. A single cyber incident can halt operations, wreck customer relationships, and erode trust built over decades. Today, cybersecurity is a boardroom topic, not just a server-room one. Recent Mastercard research found that 93% of European organizations have experienced fraud or attempted cyberattacks in the past year. A third (32%) say those attempts are becoming more frequent. But the numbers only tell part of the story. What sticks with me is the uncertainty behind them. Leaders know they need to act, but they're not always sure where to start, which risks to tackle first, or whether their investments are actually making a difference. In fact, 69% of business leaders say measuring the success of cybersecurity investments is challenging. Many also struggle to integrate security with legacy systems and to manage AI-enabled attacks. ### Rethinking the Goal: Confidence, Not Perfection We need to change how we talk about cybersecurity. The goal can't be to eliminate every risk—no organization can promise that. Instead, businesses need the confidence that comes from understanding their exposure, preparing for disruption, and knowing how to respond when something goes wrong. What's encouraging is that many organizations are already shifting their approach. One in three European business leaders say they're broadening their cybersecurity priorities as they increase their use of technology. That includes real-time monitoring and incident response, supplier risk management, and compliance with evolving AI regulations. These aren't just technical decisions—they're decisions about protecting a business's ability to operate, innovate, and keep customer trust. > "Resilience grows through collaboration." — Michele Centemero ### No Business Is an Island These decisions can't be made in isolation. No business operates alone anymore. Suppliers, technology providers, payment partners, and service providers all play a role in keeping businesses and customers safe. A weakness in one part of the network can have ripple effects across the rest. That's why third-party risk management is becoming a top priority for business leaders. Many European leaders also recognize they don't have all the answers in-house. The best partners help businesses make sense of a changing landscape, spot emerging risks sooner, and respond with greater confidence. At Mastercard, we've learned that resilience grows through collaboration. Our European Cyber Resilience Centre brings businesses together with governments, regulators, and law enforcement to share intelligence and strengthen collective defenses. We continue to invest in technologies and partnerships that help organizations understand cyber risk and respond to emerging threats. ### Leadership, Culture, and Accountability Technology matters, but technology alone will never be enough. Resilience also depends on leadership, clear accountability, and a culture where security is part of everyday decision-making. Boards should be asking not only whether their organizations are protected, but how risk is measured, how quickly the business could recover, and what a serious incident would mean for customer trust. Cybersecurity is no longer just a technical challenge—it's a business imperative. And the sooner leaders treat it that way, the better prepared they'll be for whatever comes next.