<div>
Today, Steve looks toward the horizon, at the threats and challenges that enterprises and business leaders will face in 2026 and beyond. He also gives advice on how everyone, from the board to the practitioner, can meet these challenges, and answers some of the questions he’s received this year. Key Takeaways:</div><ol>
<li>Steve’s four key drivers of cyber risk heading into 2026 are AI, supply chain, quantum, and geopolitical instability.</li>
<li>Crucial to cyber resilience are strong governance and a security-conscious culture.</li>
<li>Adaptive governance and adaptive security are keys to managing the challenges of 2026 and beyond. </li>
</ol><div>Tune in to hear more about:</div><ol>
<li>Steve’s four key drivers of cyber risk heading into 2026 (2:23)
</li>
<li>Questions to ask, whether you’re a board member, an executive, or practitioner (16:14)</li>
<li>The changing role of the board (18:54)</li>
</ol><div>Standout Quotes:</div><ol>
<li>“ Resilience really needs an organizational wide holistic approach that takes technology, it takes governance, it takes operational readiness, and really importantly, it takes people into account.” - Steve Durbin</li>
<li>“I think boards need to really take it upon themselves to absolutely recognize that cyber risk is a national risk. It is a business ending risk, and they need to ensure that they don't just have incident response and resilience in place, but that they also have a tried and tested plan, so this is good old fashioned BCP — business continuity planning — with a cyber flavor.” - Steve Durbin</li>
<li>“Cyber risk reporting has to be business outcome oriented. Boards, business executives understand revenue, operations, customer impact, legal exposure. That's the way we have to be reporting cyber risk. It's not about how many attacks we repelled, it's not about how good our systems might be. You need to translate it into business language. If you can do that, not only will you get buy-in, but you'll also have a much richer conversation about the role that cyber and therefore cybersecurity and cyber resilience play in the business.” - Steve Durbin</li>
</ol><div>
Read the <a href="https://drive.google.com/file/d/1cxbKzjw5srKWnAYsp-X1Dh0duZ2EqLln/view?usp=sharing">transcript</a> of this episode Subscribe to the ISF Podcast wherever you listen to podcasts Connect with us on <a href="https://www.linkedin.com/company/information-security-forum/">LinkedIn</a> and <a href="https://twitter.com/securityforum">Twitter</a>
</div> <div>
From the <a href="https://www.securityforum.org/">Information Security Forum</a>, the leading authority on cyber, information security, and risk management.
</div>

Today, Steve looks toward the horizon, at the threats and challenges that enterprises and business leaders will face in 2026 and beyond. He also gives advice on how everyone, from the board to the practitioner, can meet these challenges, and answers some of the questions he’s received this year. Key Takeaways: Steve’s four key drivers of cyber risk heading into 2026 are AI, supply chain, quantum, and geopolitical instability. Crucial to cyber resilience are strong governance and a security-conscious culture. Adaptive governance and adaptive security are keys to managing the challenges of 2026 and beyond. Tune in to hear more about: Steve’s four key drivers of cyber risk heading into 2026 (2:23) Questions to ask, whether you’re a board member, an executive, or practitioner (16:14) The changing role of the board (18:54) Standout Quotes: “ Resilience really needs an organizational wide holistic approach that takes technology, it takes governance, it takes operational readiness, and really importantly, it takes people into account.” - Steve Durbin “I think boards need to really take it upon themselves to absolutely recognize that cyber risk is a national risk. It is a business ending risk, and they need to ensure that they don't just have incident response and resilience in place, but that they also have a tried and tested plan, so this is good old fashioned BCP — business continuity planning — with a cyber flavor.” - Steve Durbin “Cyber risk reporting has to be business outcome oriented. Boards, business executives understand revenue, operations, customer impact, legal exposure. That's the way we have to be reporting cyber risk. It's not about how many attacks we repelled, it's not about how good our systems might be. You need to translate it into business language. If you can do that, not only will you get buy-in, but you'll also have a much richer conversation about the role that cyber and therefore cybersecurity and cyber resilience play in the business.” - Steve Durbin Read the transcript of this episode Subscribe to the ISF Podcast wherever you listen to podcasts Connect with us on LinkedIn and Twitter From the Information Security Forum, the leading authority on cyber, information security, and risk management.

Today, Steve looks toward the horizon, at the threats and challenges that enterprises and business leaders will face in 2026 and beyond. He also gives advice on how everyone, from the board to the practitioner, can meet these challenges, and answers some of the questions he’s received this year.&nbsp;Key Takeaways:<ol>
<li>Steve’s four key drivers of cyber risk heading into 2026 are AI, supply chain, quantum, and geopolitical instability.</li>
<li>Crucial to cyber resilience are strong governance and a security-conscious culture.</li>
<li>Adaptive governance and adaptive security are keys to managing the challenges of 2026 and beyond.&nbsp;</li>
</ol>Tune in to hear more about:<ol>
<li>Steve’s four key drivers of cyber risk heading into 2026 (2:23)
</li>
<li>Questions to ask, whether you’re a board member, an executive, or practitioner (16:14)</li>
<li>The changing role of the board (18:54)</li>
</ol>Standout Quotes:<ol>
<li>“ Resilience really needs an organizational wide holistic approach that takes technology, it takes governance, it takes operational readiness, and really importantly, it takes people into account.” - Steve Durbin</li>
<li>“I think boards need to really take it upon themselves to absolutely recognize that cyber risk is a national risk. It is a business ending risk, and they need to ensure that they don't just have incident response and resilience in place, but that they also have a tried and tested plan, so this is good old fashioned BCP — business continuity planning — with a cyber flavor.” - Steve Durbin</li>
<li>“Cyber risk reporting has to be business outcome oriented. Boards, business executives understand revenue, operations, customer impact, legal exposure. That's the way we have to be reporting cyber risk. It's not about how many attacks we repelled, it's not about how good our systems might be. You need to translate it into business language. If you can do that, not only will you get buy-in, but you'll also have a much richer conversation about the role that cyber and therefore cybersecurity and cyber resilience play in the business.” - Steve Durbin</li>
</ol>
Read the <a href="https://drive.google.com/file/d/1cxbKzjw5srKWnAYsp-X1Dh0duZ2EqLln/view?usp=sharing" rel="noopener noreferrer">transcript</a> of this episode Subscribe to the ISF Podcast wherever you listen to podcasts Connect with us on <a href="https://www.linkedin.com/company/information-security-forum/" rel="noopener noreferrer">LinkedIn</a> and <a href="https://twitter.com/securityforum" rel="noopener noreferrer">Twitter</a>
 
From the <a href="https://www.securityforum.org/" rel="noopener noreferrer">Information Security Forum</a>, the leading authority on cyber, information security, and risk management.

354: SUMMER LISTENING: Emerging Threats for 2026

<div>With CISO’s busy preparing for an inevitable cyber-attack, triggers of engagement to communicate with the board have never been more important. In this podcast Steve Durbin, Managing Director at the ISF, confronts the challenges between the CISO and the board and explains how CISO’s can exhibit C-suite leadership and engage with the board and stakeholders effectively. Search for more guidance on engaging with the board here: <a href="http://www.securityforum.org">www.securityforum.org</a> <a href="https://www.securityforum.org/videos-podcasts/isf-podcast-cisoith-steve-durbin/">https://www.securityforum.org/videos-podcasts/isf-podcast-cisoith-steve-durbin/</a>
</div>

With CISO’s busy preparing for an inevitable cyber-attack, triggers of engagement to communicate with the board have never been more important. In this podcast Steve Durbin, Managing Director at the ISF, confronts the challenges between the CISO and the board and explains how CISO’s can exhibit C-suite leadership and engage with the board and stakeholders effectively. Search for more guidance on engaging with the board here: www.securityforum.org https://www.securityforum.org/videos-podcasts/isf-podcast-cisoith-steve-durbin/

With CISO’s busy preparing for an inevitable cyber-attack, triggers of engagement to communicate with the board have never been more important. In this podcast Steve Durbin, Managing Director at the ISF, confronts the challenges between the CISO and the board and explains how CISO’s can exhibit C-suite leadership and engage with the board and stakeholders effectively. Search for more guidance on engaging with the board here: <a href="http://www.securityforum.org" rel="noopener noreferrer">www.securityforum.org</a> <a href="https://www.securityforum.org/videos-podcasts/isf-podcast-cisoith-steve-durbin/" rel="noopener noreferrer">https://www.securityforum.org/videos-podcasts/isf-podcast-cisoith-steve-durbin/</a>

CISO And The Board: Triggers Of Engagement, with Steve Durbin

<h1>The ISF Podcast brings you cutting-edge conversation, tailored to CISOs, CTOs, CROs, and other global security pros. In every episode of the ISF Podcast, Chief Executive, Steve Durbin speaks with rule-breakers, collaborators, culture builders, and business creatives who manage their enterprise with vision, transparency, authenticity, and integrity. From the Information Security Forum, the leading authority on cyber, information security, and risk management.</h1>

Business

Technology

Tech News

Careers

Management

The ISF Podcast brings you cutting-edge conversation, tailored to CISOs, CTOs, CROs, and other global security pros. In every episode of the ISF Podcast, Chief Executive, Steve Durbin speaks with rule-breakers, collaborators, culture builders, and business creatives who manage their enterprise with vision, transparency, authenticity, and integrity. From the Information Security Forum, the leading authority on cyber, information security, and risk management.

Share ISF Podcast

Sign up to save your podcasts

ISF Podcast

ISF Podcast episodes

About ISF Podcast

More shows like ISF Podcast

All Ears English Podcast

The Happiness Lab with Dr. Laurie Santos

Think Fast Talk Smart: Communication Techniques

Confident Business English