Firewall or Flywheel? Why Cybersecurity Still Isn’t Seen as an Economic Stabiliser

Ask a boardroom whether a cyber‑attack could shake an entire economy and you’ll get a chorus of nods. Ask whether that risk is funded the way a flood‑control dam is, and the smiles start to fade.

In April 2026 the World Economic Forum’s Global Future Council on Cybersecurity ran a survey of senior executives. Forty‑two percent said they could point to a clear, measurable impact of cyber‑risk on output and market performance. Yet a paltry nine percent actually classified cybersecurity as an "economic stabiliser" in their own organisations.

Even more telling, more than half of respondents admitted their cyber‑spending is largely reactive – triggered by a breach or a headline‑grabbing incident rather than a calculated return on investment. In other words, they tend to pour money into the fire‑wall after the fire has already started.

The report argues that part of the problem is simply a language gap. The digital backbone that now carries our payments, moves goods through supply chains, runs factories and even powers public‑service platforms is so ingrained that we often forget it’s vulnerable. When a systemic failure hits, it doesn’t just cripple a single IT department – it can ripple across borders and dent national GDP.

Unfortunately, technical teams and boardrooms often speak past each other. Executives hear words like “threat vector” or “zero‑day,” while technologists are left to translate those into the language of “resilience,” “continuity,” “trust” and “stability” – concepts that sit squarely on the board’s agenda.

To bridge that divide, the Forum suggests six common yardsticks, ranging from service‑continuity metrics to recovery‑credibility scores. More importantly, it urges companies to re‑think the budget line: treat cyber‑spending as "productive capital" – an investment that not only prevents loss but actively creates value.

That value, the Council says, can be seen in reduced financial and operational exposure, stronger trust across ecosystems, smoother digital transformation journeys and tighter governance. In short, security becomes a driver, not just a shield.

The ideas echo a May 2026 Forum paper that labelled cyber incidents as a systemic economic threat, and an International Monetary Fund note that urged policymakers to elevate cyber‑risk to a core financial‑stability issue, especially as AI‑enabled attacks rise.

Of course, the 42 % and 9 % figures come from a perception survey, not an audit of spend. Still, the trend is hard to ignore. Until organisations start pricing cyber‑defence like the capital it protects, the bill will keep arriving after the damage is done.