70% of CISOs say internal conflicts more damaging than cyberattacks

CISO-CEO tension and unclear authority under duress are imperiling incident response. CISOs must establish not only clear response plans but also leadership alliances centered on business value, advisors say.

Roughly 70% of security executives believe internal conflicts during a crisis cause more problems than the cyberattack itself.

“CISO-CEO tension, unclear authority, unrehearsed scenarios, and communication gaps between key teams cripple breach response despite major investments in tools and talent,” concludes the Cytactic 2025 State of Cyber Incident Response Management (CIRM) Report, based on a survey of 480 senior U.S. cybersecurity leaders. “Blurred authority and shifting responsibilities frequently delay response efforts, creating more disruption than the attackers themselves.”

Read more at CSO Online