Survey Reveals Growing Influence of CISOs as Strategic Leaders in Business

A recent survey by Deloitte Global highlights that 20% of businesses now have their Chief Information Security Officers (CISOs) reporting directly to CEOs instead of Chief Information Officers (CIOs), signaling the increasing strategic influence of the role within organizations.

The findings are part of the fourth edition of the “Global Future of Cyber Survey,” which gathered responses from nearly 1,200 cybersecurity decision-makers across 43 countries and six industries. The report emphasizes how cybersecurity has become integral to organizational growth, with a notable rise in the prominence of the CISO role.

Deloitte’s global cyber leader, Emily Mossburg, commented that the rapid advancement of AI and other technologies has significantly altered the threat landscape. As threats become more sophisticated and deeply impactful to core business functions, CISOs are being tasked with adopting more strategic roles, focusing on risk prioritization and mitigation across the organization. She noted that the growing connection between CISOs and CEOs underscores the vital role of security in long-term business success, with CISOs evolving from protectors against external threats to key players in driving strategic decision-making within their companies.

The survey found that around one-third of respondents reported an increase in CISO involvement in discussions about technology capabilities over the past year, highlighting the expanding importance of CISOs in shaping corporate resilience and technological strategies.

CISOs Gaining Influence as Key Advisors to CEOs and Boards

In response to the rise in cyberattacks, CISOs are becoming more influential as advisors to CEOs and boards. This shift is driven by the emergence of AI-generated threats, which exploit vulnerabilities by mimicking trusted sources. According to the survey, 39% of respondents are already extensively using AI in their cybersecurity programs, reflecting a more integrated approach to cybersecurity across businesses.

Cybersecurity is also playing a crucial role in safeguarding investments in emerging technologies. Focus areas identified include cloud security (48%), Generative AI (41%), and data analytics (41%). High-performing organizations, described as “cyber-mature,” demonstrate consistent cyber planning, strategic board-level engagement, and effective use of AI to enhance their capabilities. These organizations are expected to achieve their business goals by 27% more on average than other respondents.

The growing urgency for secure systems is underscored by the fact that 25% of respondents from cyber-mature companies reported experiencing 11 or more cybersecurity incidents in the past year, a 7% rise from 2023. Incidents related to data loss affected 28% of organizations in 2024, an increase of 14% from the previous year, further highlighting the evolving threat landscape.

Organizations increasingly recognize cybersecurity as essential to their technology infrastructure, strategic planning, and overall growth. The survey indicated that the leading outcomes of cybersecurity initiatives include protecting intellectual property (46%), improving threat detection and response (44%), and enhancing organizational efficiency and agility (44%).

A significant majority (83%) of respondents agreed that qualitative risk assessments and benchmarking tools are critical components of their cybersecurity strategies. Over half (58%) expect to integrate cybersecurity spending with other key budgets, including digital transformation, IT initiatives, and cloud investments. Moreover, 57% of respondents anticipate increasing their cybersecurity budgets over the next 12 to 24 months, reflecting the growing importance of cybersecurity in business operations.

Have you read?
World’s Best Countries To Invest In Or Do Business.
World’s Most Startup-Friendly Countries.
World’s Best Countries For Quality of Life.
Largest Economies Europe In 2024.
GDP of the BRICS countries (2000 to 2028).