Foreword In today’s digitally interdependent world, the role of the chief information security officer (CISO) is more critical and complex than ever. Security leaders must navigate geopolitical volatility, technological disruption and systemic cyber risks, all while building trust and driving innovation. Cybersecurity is now a core business imperative. The CISO’s remit extends far beyond technical defence: it involves translating global shifts into actionable strategies, guiding the secure adoption of emerging technologies – such as AI and quantum computing – and building resilient ecosystems with partners, regulators and peers. To succeed, CISOs need more than responsibility and credibility – they need systemic empowerment. Boards and executives must recognize that the CISO role needs a broad mandate.This white paper, shaped by the World Economic Forum’s global CISO community and grounded in real-world experience, offers a practical view on elevating cybersecurity within an organization through the analysis of the CISO role. It highlights how organizations can transform cyber risk into resilience and convert trust into sustainable value creation. We urge every leader – whether in the boardroom, the C-suite or the security team – to seize this moment. By redefining the CISO as a strategic enabler, cybersecurity can evolve from a cost centre or compliance exercise into a driver of growth, trust and innovation.Sabrina Feng Chief Risk Officer, Technology, Cyber and Resilience, London Stock Exchange Group (LSEG); Co-Chair, World Economic Forum CISO Community Elevating Cybersecurity: Ensuring Strategic and Sustainable Impact for CISOsOctober 2025 Akshay Joshi Head, Centre for Cybersecurity, Member of the Executive Committee, World Economic ForumChristophe Blassiau Senior Vice-President and Group Chief Information Security Officer, Schneider Electric; Co-Chair, World Economic Forum CISO Community Elevating Cybersecurity: Ensuring Strategic and Sustainable Impact for CISOs 3

Elevating Cybersecurity 2025