Endnotes 1. European Parliament and Council of the European Union. (2022). Directive (EU) 2022/2555 of the European Parliament and of the Council of 14 December 2022 on measures for a high common level of cybersecurity across the Union, amending Regulation (EU) No 910/2014 and Directive (EU) 2018/1972, and repealing Directive (EU) 2016/1148 (NIS2 Directive). Official Journal of the European Union, L333, 80–152. https://eur-lex.europa.eu/legal-content/EN/ TXT/?uri=CELEX%3A32022L2555 2. World Economic Forum. (2025, January 13). Global cybersecurity outlook 2025. https://www.weforum.org/publications/ global-cybersecurity-outlook-2025/ 3. Microsoft Corporation. (2024). Microsoft digital defense report 2024. https://www.microsoft.com/en-us/security/security- insider/intelligence-reports/microsoft-digital-defense-report-2024 4. World Economic Forum. (2025, January 21). Artificial intelligence and cybersecurity: Balancing risks and rewards. https://www.weforum.org/publications/industries-in-the-intelligent-age-white-paper-series/cybersecurity/ 5. World Economic Forum. (2025, January). AI in action: Beyond experimentation to transform industry. https://reports.weforum.org/docs/WEF_AI_in_Action_Beyond_Experimentation_to_Transform_Industry_2025.pdf 6. World Economic Forum. (2025, April 24). The cyber resilience compass: Journeys towards resilience. https://www.weforum.org/publications/the-cyber-resilience-compass-journeys-towards-resilience/ 7. Inside Google. (2025, March 18). Google announces agreement to acquire Wiz. https://blog.google/inside-google/ company-announcements/google-agreement-acquire-wiz/ 8. Global Cybersecurity Forum and Boston Consulting Group. (2024). 2024 cybersecurity workforce report: Bridging the workforce shortage and skills gap. https://web-assets.bcg.com/61/d3/705fbd684d70b0e5f98cdcf7cf47/2024- cybersecurity-workforce-report.pdf; ISC2. (2024, September 11). Growth of cybersecurity workforce slows in 2024 as economic uncertainty persists. https://www.isc2.org/Insights/2024/09/ISC2-Publishes-2024-Cybersecurity-Workforce- Study-First-Look 9. World Economic Forum. (2024, April 28). Strategic cybersecurity talent framework. https://www.weforum.org/ publications/strategic-cybersecurity-talent-framework/ 10. Fortinet. (2024). 2024 cybersecurity skills gap. https://www.fortinet.com/content/dam/fortinet/assets/reports/2024- cybersecurity-skills-gap-report.pdf 11. ISACA. (2024, October 1). State of cybersecurity 2024. https://www.isaca.org/resources/reports/state-of- cybersecurity-2024 12. Standard Chartered. (2018, October 18). Fighting financial crime with cybersecurity insights. https://www.sc.com/en/ news/fighting-financial-crime-with-cybersecurity-insights-2 13. World Economic Forum. (2021, March 23). Principles for board governance of cyber risk. https://www.weforum.org/ publications/principles-for-board-governance-of-cyber-risk/ 14. Tooling is the suite of technical solutions, platforms and technologies used to support an organization’s cybersecurity strategy and operations, which the CISO oversees, integrates and optimizes to detect, prevent and respond to cyber threats. 15. Accenture. (2023, June 12). State of cybersecurity resilience 2023. https://www.accenture.com/us-en/insights/security/ state-cybersecurity 16. World Economic Forum. (2025, April 24). The cyber resilience compass: Journeys towards resilience. https://www.weforum.org/publications/the-cyber-resilience-compass-journeys-towards-resilience/ 17. World Economic Forum. (2019, February 13). Cyber resilience in the electricity ecosystem: Principles and guidance for boards. https://www.weforum.org/publications/cyber-resilience-in-the-electricity-ecosystem-principles-and-guidance- for-boards/ 18. World Economic Forum. (2021, April 14). Pathways towards a cyber resilient aviation industry. https://www.weforum.org/ publications/pathways-towards-a-cyber-resilient-aviation-industry/ 19. World Economic Forum. (2021, May 17). Cyber resilience in the oil and gas industry: Playbook for boards and corporate officers. https://www.weforum.org/publications/cyber-resilience-in-the-oil-and-gas-industry-playbook-for-boards-and- corporate-officers/ Elevating Cybersecurity: Ensuring Strategic and Sustainable Impact for CISOs 25

Elevating Cybersecurity 2025