An evolving cyber threat landscape requires different defensive tactics. CFOs who want to ensure they’re making the right investments to address these threats must rely both on technology and their information-security counterparts, experts told CFO Brew. It’s easy to see how cyber hygiene, which may sound like merely an IT concern, is also a CFO issue when considering the financial risks. On average, a data breach cost global organizations $4.4 million in 2025, IBM calculated in its latest Cost of a Data Breach report. Experts also warned that a data breach can have long-term consequences. CFOs overseeing security budgets need to lean on their chief information security officers (CISOs), according to Holly Grey, CFO of penetration testing company Horizon3.ai. “A CFO is always trying to manage the company’s dollars prudently, and the CISO’s job is to make sure that the appropriate security protocols are set up for a company,” Grey said. “There absolutely has to be a dialogue between those two individuals.” CFOs should expect that their CISOs are going to ask for more than an organization can spend on security, she said, adding: “The way I always approached those [situations] was, ‘What’s the trade-off and what is the level of risk?’” Keep reading.—AZ |