The role of cybersecurity leader needs to evolve, as accountability for cyber risk shifts outside IT and an increasingly distributed ecosystem leads to a loss of direct decision-making control, according to Gartner.
Security and risk management (SRM) leaders now invest significantly more effort into evaluating and influencing the cyberhealth of external parties. Employees are making more decisions with cyber risk implications, and executive committees being established outside the scope of the cybersecurity leader.