Risk, Regulation & Cyber Economics: Where Should Leaders Invest Next?

By Durga Dube , Felix Mohan , Mihir Kumar Sahoo , M Unni Nair on 27 Feb 2026 @ Nullcon
πŸ”— Link
We need help to complete this entry! Missing: Video
I can help!
#risk-management #cyber-insurance #regulatory-compliance #security-governance
Focus Areas: βš–οΈ Governance, Risk & Compliance

Abstract

How cybersecurity leaders balance budgets, regulatory pressure, cyber insurance realities and the growing challenge of cyber debt.

Cybersecurity investment decisions in 2026 exist at the intersection of three powerful forces: enterprise risk appetite, evolving regulatory mandates and the harsh economics of cyber insurance and breach costs. CISOs face mounting pressure to justify every security dollar while navigating India’s DPDP Act, sectoral regulations and a cyber insurance market that is simultaneously hardening premiums and tightening coverage. The question is no longer “should we invest more in security?” but “where should we invest to satisfy regulators, reduce actuarial risk and deliver measurable risk reduction?”

This session will cover: Building a unified cyber economics and governance model; Quantifying cyber risk in financial terms; Non-compliance costs vs. breach costs.