Cyber Risk Management: IT Problem, Leadership Problem, or Something Bigger?

Cyber risk management is no longer just an IT issue. It is a leadership challenge that affects every part of an organization.In this episode of the Cyber Insurance News and Information Podcast, host Martin Hinton speaks with Max Martina, president of Cambridge Leadership Associates, about why cyber risk is an adaptive problem not just a technical one.They explore the evolving role of the CISO, the leadership failures behind cyber incidents, and how organizational silos, culture, and governance shape real-world outcomes. The conversation also covers cyber resilience, crisis response, coalition building, and the growing impact of AI on cybersecurity.If you work in cyber insurance, cybersecurity, enterprise risk, or executive leadership, this episode offers practical insights into how organizations can better manage cyber risk in a rapidly changing environment.Cyber risk as an adaptive problemLeadership and cybersecurity decision-makingThe evolving role of the CISOCyber resilience vs readinessOrganizational silos and governance challengesPsychological safety and cybersecurity cultureAI and the future of cyber riskVUCA Framework Chapters00:00 Understanding Cyber Risk as an Adaptive Challenge02:37 The Role of Leadership in Cybersecurity05:47 Organizational Structures and Cyber Risk08:58 The CISO's Position and Responsibilities11:41 Building Coalitions for Cyber Resilience14:38 The Importance of Psychological Safety17:49 Navigating Leadership Challenges20:37 Resilience vs. Readiness in Cybersecurity24:00 Learning from Cyber Incidents26:40 The Impact of Organizational Culture on Cybersecurity29:33 Case Studies in Cybersecurity Governance32:36 The CEO's Role in Cybersecurity35:42 The Human Element in Cybersecurity44:48 Collaboration Among CISOs48:47 The Psychological Barriers to Cybersecurity50:56 The Role of AI in Cybersecurity55:40 The Cost Center Mentality in Cybersecurity01:00:45 Understanding the Repeated Failures in Cybersecurity01:05:42 The Need for Adaptive Leadership in Cybersecurity01:09:49 The Future of Cybersecurity Leadership