{"id":28379,"date":"2026-05-29T04:00:00","date_gmt":"2026-05-29T02:00:00","guid":{"rendered":"https:\/\/www.thebrokernews.ch\/?p=28379"},"modified":"2026-05-28T17:07:51","modified_gmt":"2026-05-28T15:07:51","slug":"cyber-is-not-an-it-problem-riskin-conf26","status":"publish","type":"post","link":"https:\/\/www.thebrokernews.ch\/en\/cyber-is-not-an-it-problem-riskin-conf26\/","title":{"rendered":"Cyber is not an IT problem"},"content":{"rendered":"
Cyber is not an IT problem that belongs on the Board of Directors.<\/span><\/div>\n\n

Cybersecurity was the dominant topic at Risk-!n 2026 in Zurich. Experts from the industry were unanimous: anyone who continues to leave cyber risks to the IT department alone is acting negligently.<\/strong><\/p>\n\n

Filip Talac, CEO of Quantum Fort AG<\/a>, opened his presentation at the eighth edition of the Risk-!n 2026 conference with a story that caused a hush in the room. Last year, a beer company lost 4.2 million dollars in a single afternoon, not because a firewall failed, but because the CFO fell for a fake email from the company boss and made a bank transfer. The IT department had done its job flawlessly. The failure was a governance failure, not a technical one.<\/p>\n\n

This is precisely Talac’s central argument: cyber security has been framed incorrectly for decades. If you treat it as an IT problem, you get IT solutions: more alerts, more complexity, more tools. Today, the average company operates between 60 and 80 security tools, and yet the cost of data breaches worldwide reaches record highs, averaging 4.9 billion dollars per incident. <\/p>\n\n

\n
\"\"
St\u00e9phane Martin, Co-Founder Risk-!<\/figcaption><\/figure>\n\n\n\n
\"\"
Filip Talac, CEO Quantum Fort AG<\/figcaption><\/figure>\n\n\n\n
\"\"
Christian Koxholt CCO Quantum Fort AG<\/figcaption><\/figure>\n\n\n\n
\"\"
Julien Chamonal (CRO Citalid), Silvia Signoretti (President SIH), Serena Fiovaranti (CRO ABN AMRO), Mark Sweeney, (Underwriting Manager Munich Re)<\/figcaption><\/figure>\n\n\n\n
\"\"
Pierre Brunel (CEO Aon CH), Mindy Simon (COO Aon), Shira Kaplan (Founder Cyverse), Filip Talac (CEO Quantum Fort), Mario Keil (Head Sales Corporater), St\u00e9phane Martin<\/figcaption><\/figure>\n<\/figure>\n\n
The language of the boardroom<\/strong><\/h6>\n\n

Talac is particularly critical of the communication between IT and the Management Board. When a CISO talks about “CVE-2024-12345” and “847 outstanding alerts”, nobody in the room understands what decisions need to be made apart from him. Managers lead on the basis of business results, not IT metrics. The right questions are: What exposure could harm us the most? Who decides what and how quickly when it happens? And are we actually spending the right amount? <\/p>\n\n

As an example, Talac cited a healthcare company with twelve security specialists, seven security tools and a budget in the millions, but which could not answer who decides whether appointments are canceled in the event of a database failure. When a ransomware attack occurred six months later, the IT team recognized the intrusion within two hours. The management then debated the response strategy for eleven hours, three different managers gave conflicting instructions, and the COO authorized the ransom payment without consulting the board of directors. <\/p>\n\n

Quantification beats intuition<\/strong><\/h6>\n\n

Another conference session delved deeper into the topic from the perspective of risk financing. Julien Chamonal, Chief Revenue Officer of Citalid<\/a>, emphasized that cyber risks only become truly controllable when they can be expressed in francs and euros. A CISO fighting for a budget will get much further with quantified risk reductions from the CFO than with traffic light colors. The CRO perspective was provided by Serena Fioravanti from ABN AMRO<\/a>: At the bank, cyber risk is now primarily treated as a resilience issue, not as a classic capital risk, but the trend is clearly moving towards quantification. <\/p>\n\n

Mark Sweeney from Munich Re<\/a> summed it up from an insurer’s perspective: Mature clients are those who have done the risk quantification exercise, he said, because this is the only way to ensure meaningful risk transfer. The message from the conference was clear: cyber security belongs on the board of directors, not in the server room. <\/p>\n\n

Binci Heeb<\/p>\n\n

Read also: LBC Insurance Radar #12: Cyber, ESG and brokers in upheaval<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Cybersecurity was the dominant topic at Risk-!n 2026 in Zurich. Experts from the industry were unanimous: anyone who continues to leave cyber risks to the IT department alone is acting […]<\/p>\n","protected":false},"author":2,"featured_media":28378,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"_price":"","_stock":"","_tribe_ticket_header":"","_tribe_default_ticket_provider":"","_tribe_ticket_capacity":"0","_ticket_start_date":"","_ticket_end_date":"","_tribe_ticket_show_description":"","_tribe_ticket_show_not_going":false,"_tribe_ticket_use_global_stock":"","_tribe_ticket_global_stock_level":"","_global_stock_mode":"","_global_stock_cap":"","_tribe_rsvp_for_event":"","_tribe_ticket_going_count":"","_tribe_ticket_not_going_count":"","_tribe_tickets_list":"[]","_tribe_ticket_has_attendee_info_fields":false,"footnotes":""},"categories":[5100,5134],"tags":[12526,8456,7271,5286,5724,12528,12529,12527,12525,8786],"class_list":["post-28379","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-current","category-general","tag-ciso","tag-citalid-en","tag-cyber-en","tag-cyber-risks","tag-cybersecurity-en","tag-intuition","tag-it-department","tag-management-level-2","tag-munich-re","tag-quantification","ownarticle"],"acf":[],"cc_featured_image_caption":{"caption_text":"Cyber is not an IT problem that belongs on the Board of Directors.","source_text":"","source_url":""},"_links":{"self":[{"href":"https:\/\/www.thebrokernews.ch\/en\/wp-json\/wp\/v2\/posts\/28379","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.thebrokernews.ch\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.thebrokernews.ch\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.thebrokernews.ch\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.thebrokernews.ch\/en\/wp-json\/wp\/v2\/comments?post=28379"}],"version-history":[{"count":6,"href":"https:\/\/www.thebrokernews.ch\/en\/wp-json\/wp\/v2\/posts\/28379\/revisions"}],"predecessor-version":[{"id":28557,"href":"https:\/\/www.thebrokernews.ch\/en\/wp-json\/wp\/v2\/posts\/28379\/revisions\/28557"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.thebrokernews.ch\/en\/wp-json\/wp\/v2\/media\/28378"}],"wp:attachment":[{"href":"https:\/\/www.thebrokernews.ch\/en\/wp-json\/wp\/v2\/media?parent=28379"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.thebrokernews.ch\/en\/wp-json\/wp\/v2\/categories?post=28379"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.thebrokernews.ch\/en\/wp-json\/wp\/v2\/tags?post=28379"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}