Risk appetites have grown for 81% of CISOs

Netskope has published a new report analyzing the evolution of the CISO role within the retail sector. ‘The Retail CISO: Bringing Balance’, is based on research with over 1,000 CISOs globally, and it explores the evolution of the retail sector CISO role as a strategic member of the executive team, comparing the sector to cross-sector averages to identify unique insights.

  • Monday, 7th October 2024 Posted 4 months ago in by Phil Alsop

81% of retail CISOs say their appetite for risk has grown in recent years (much higher than the cross-sector average of 57%), but all (100%) believe conflicting risk appetites in the C-suite are a major issue.

Less than 2% of retail sector CISOs classify their risk appetite as low

However, nearly a quarter (23%) would describe their CEOs’ risk appetite as low

Retail CISOs see interactions with the C-suite and business as a constant balancing act, with 47% reporting that most interactions are about risk and 53% countering that most are about opportunity

An overwhelming majority (98%) of retail CISOs now consider themselves to be business enablers (well above the cross-sector average of 59%), and more than four-fifths (87%) want to play a more active role as a business enabler going forward (compared to an average of 67%). 86% of retail CISOs increasingly see their role as improving business resilience, not just managing cyber risk.

Retail CISOs are clear that they want to embrace more measured, centralized decision-making processes knowing the high levels of governance involved. This again contrasts with all other sectors who saw themselves moving the other way—drawn to a model described as “agile, fast decision-making with devolved responsibility”.

One of the pathways identified by retail CISOs for achieving the sometimes conflicting goals of the C-suite is adopting a zero trust approach. More than two-thirds (72%) believe zero trust will help them balance conflicting priorities better (higher than cross-sector averages of 55%), enable their organizations to move faster (77%) and encourage more innovation (71%).

Commenting on the findings, James Robinson, Chief Information Security Officer, Netskope said:

“Over the past decade, CISOs in the retail sector have transformed themselves, and their appetite for risk - along with their confidence in their ability to transform their organization - is marked. They have clearly identified that a zero trust approach holds advantages for their organizations, and are embracing it earlier than other industries - 71% already follow zero trust principles compared to sector averages of 44%.

However, in order to elevate their standing among their C-suite peers, CISOs will need to ensure their strategic discussions do not fall back into conversations about technology tools. Communication must focus on business enablement and business risk.”

Global AI adoption to surge 20%

Posted 3 days ago by Phil Alsop
AI adoption has skyrocketed over the past years as businesses and individuals increasingly integrate AI-powered tools into everyday life. In 2020,...

Sovereign Cloud market surges

Posted 3 days ago by Phil Alsop
Broadcom reveals new research on the state of sovereign cloud in Europe from Johan David Michels of Queen Mary University of London. Michels’...
Other key findings include a resurgence of cryptomining malware, an increase in signature-based and social engineering attacks, and increased malware...
Lack of expertise is the top barrier to AI adoption.

AI adoption hesitancy

Posted 4 days ago by Phil Alsop
A new industry report on compliance in the UK reveals a striking paradox: while 58% of businesses cite manual processes as their biggest challenge,...
Threats continue to increase from Q3 level – with manufacturing being most targeted industry.
Cyber security and artificial intelligence (AI) are set to fuel a 5 per cent rise in IT spending from European businesses during 2025, according to...

Too many organisations still have no data strategy

Posted 1 week ago by Phil Alsop
Data leaders recognise the need for flexible, department-specific governance to navigate the complexities of AI integration and escalating data...