A recent survey by Gartner, a leading insights company, has revealed a startling lack of confidence among non-executive directors (NEDs) when it comes to cybersecurity. A staggering 90% of NEDs express uncertainty about the value of cybersecurity investments, questioning the balance between protection and cost. This skepticism is a call to action for sense-making CIOs and CISOs, who play a crucial role in helping organizations navigate complexity and adapt to change.
The 2026 Gartner Board of Directors Survey, conducted across North America, Latin America, Europe, and Asia/Pacific, sheds light on the challenges faced by NEDs. With only 10% of NEDs strongly confident in cybersecurity initiatives, it's clear that boards are struggling to connect these investments to tangible business outcomes.
But here's where it gets controversial...
Kristin Moyer, Distinguished VP Analyst at Gartner, highlights the confusion caused by dashboards and compliance updates, leaving NEDs unsure about their organization's security status. Sense-maker CIOs and CISOs, however, have managed to bridge this gap by translating cybersecurity complexities into business value metrics such as revenue, cost, and shareholder impact.
Boards are seeking clarity on specific cyber threats and their real-world risks. Sense-makers provide transparency on exposure levels and threat readiness, empowering NEDs with the information necessary for informed decision-making.
When it comes to external threats impacting shareholder value, geopolitical instability and international conflict top the list for 70% of NEDs. Interestingly, one-third of NEDs also identify cyber-risks, technology disruption, and innovation challenges as significant external threats.
Tina Nunno, Managing VP at Gartner, emphasizes the personal experience of cybersecurity breaches among NEDs, both as executive leaders and board members. New security regulations and the rise of AI have brought these issues to the forefront of board agendas.
And this is the part most people miss...
Technology, including AI, is seen as both a risk and an opportunity. NEDs recognize AI's disruptive potential as a risk to shareholder value, but also as a key tool for navigating global volatility. In fact, 63% of NEDs believe that investing in technology and innovation is the best strategy to counter today's volatile geopolitical and economic landscape.
AI is ranked as the top investment expected to positively impact shareholder value in the next two years, with 57% of respondents citing it as a priority. NEDs are taking note of the significant investments in AI startups and large language models, believing that these bets will pay off over time.
The majority of boards (71%) encourage their CEOs and executive teams to take more technology risks and demonstrate an AI strategy, moving quickly to adapt to this evolving landscape.
Gartner's resources, such as "The Path to Cybersecurity's Elite and Board Confidence" and "End the Board's Cybersecurity Trust Deficit," provide further insights for clients. Additionally, the complimentary ebook "AI in Cybersecurity: Minimize Risks and Maximize Impact" offers guidance on maximizing AI's value while managing critical risks.
So, what do you think? Is AI the key to navigating volatility, or does it present too many risks? We'd love to hear your thoughts in the comments!
