Topic starter
21/08/2026 4:51 pm
TL;DR: Cybercrime and cyber insecurity entered the WEF Global Risks Report 2023 top 10, underscoring that digital disruption is now treated as a persistent business risk rather than a passing threat, according to INTIGRITI's analysis of the report. For practitioners, the signal is that resilience, identity control, and operational recovery must be governed as core risk-management capabilities, not separate security workstreams.
Editorial analysis by NHI Mgmt Group, based on content published by INTIGRITI: “WEF Global Risks Report 2023: What does it mean for cybersecurity?”.
Key questions
A: They should treat cyber risk as an enterprise continuity issue, not just a technical security one.
Q: Why does digital dependency make identity and access controls a resilience issue?
A: Because authentication, privilege, and service credentials are often the control points that keep critical systems available.
Q: What fails when critical infrastructure security is treated as a separate IT problem?
A: The organisation misses the system-level dependencies that allow disruption to cascade across services.
Practitioner guidance
- Map critical business services to identity dependencies Identify the human, service, and machine identities that support the most important business processes, then document what breaks if each one is unavailable.
- Embed recovery objectives into access governance Align authentication recovery, privileged access recovery, and service restoration targets so continuity planning covers the identities that keep systems running.
- Test resilience against control-plane failure Run exercises that assume identity services, orchestration layers, or administrative access are unavailable, and confirm the business can still operate safely.
Bottom line: Cyber risk now behaves as an enterprise continuity issue because core business services depend on connected digital systems.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
21/08/2026 5:09 pm
Cyber risk has crossed from a security issue into an enterprise governance issue. The WEF framing matters because it reflects a world in which digital disruption affects revenue, operations, and public trust, not just technical environments. That means security leaders must translate cyber risk into business continuity language, with clear ownership for resilience, recovery, and control assurance.
A question worth separating out:
Q: Should organisations prioritise preparation or response in cyber resilience programmes?
A: Organisations should prioritise preparation because it reduces the number of incidents that become expensive in the first place. Response still matters, but it cannot undo uncontrolled spread, delayed containment, or exposed identity pathways. Preparation creates the highest return when threat intelligence is tied to access and vulnerability decisions.
👉 Read our full editorial: WEF global risks and the cybersecurity governance gap