How CISO-CFO Partnerships Can Strengthen Cybersecurity

Summary

The article explains how regular CISO-CFO collaboration can align security investment with financial risk, strengthen controls over financial systems, and improve incident readiness. It recommends business-focused communication, shared planning, and clear governance.

Key points

• Only 47% of CISOs surveyed by PwC said they participate in strategic planning with CFOs on cybersecurity investments; 26% of companies usually have controls to respond rapidly to cyber threats.
• The article recommends regular CISO-CFO meetings to align security priorities, budgets, financial risk management, and compliance.
• Suggested protections for financial systems include MFA, segregation of payment duties, audit logging, and real-time ERP monitoring.
• To reduce business email compromise risk, it recommends dual approval for wire transfers, vendor-payment verification, and email authentication.
• CISOs should explain security investments in business terms, such as reduced financial exposure, avoided costs, compliance, and revenue protection.
• Including CFOs and financial reporting functions in incident response planning can support accurate reporting, recovery, and communication with auditors and stakeholders.
• The AFP survey cited in the article found that 74% of surveyed enterprises faced at least one BEC attack attempt in 2025, up from 63% in 2024.

People