CFOs should govern data security, not IT. Why? Because they hold the purse’s strings and are most qualified to plan for risk, in an era where the next cyber-attack is not a question of “If” but “when” and “how often”.
Finance leaders have always felt responsible for company data, but the spotlight has shifted to protecting people outside the business. Customer and employee data breaches can swing reputations and valuations overnight, making ethical data management a priority across the organisation.