Truly incredible: fewer than 6 out of 10 companies have a Chief Information Security Officer (CISO). That means over 40% of major Italian firms are navigating cybersecurity waters without a captain. With cyberattacks on the rise, the message is clear—if they haven’t already been breached, they soon will be.
The data from Politecnico di Milano is a wake-up call. Where a CISO is in place, 96% of companies report improvements in security. Yet far too many businesses continue to downplay the risk, as if cybersecurity were optional rather than a strategic priority.
Automation, artificial intelligence, and tighter collaboration between IT and business are the challenges companies should be tackling. But without competent cybersecurity leadership, how do they plan to succeed? Hiring a CISO isn’t a cost—it’s a necessity. The real question isn’t if an attack will happen, but when.