Stop Treating Cyber Spending as a Cost, Says WEF: It’s “Productive Capital”

A new WEF report says cybersecurity is now a condition of economic resilience. See the survey findings and what leaders are being asked to do

PGurus Newsdesk

October 10, 2026

Boards, governments and investors need a common language for cyber risk, the report says

A WEF survey found 42% recognise cyber’s impact on markets, but only 9% see it as an economic stabiliser

Cybersecurity has moved well beyond the IT department. According to a World Economic Forum (WEF) report, it has become a basic condition for economic resilience, and leaders need a shared language to turn digital risks into economic outcomes they can actually measure.

Why it matters

Digital systems now sit underneath payments, supply chains, production and public services. When they fail on a large scale, essential services stop, the damage crosses borders, and a country’s broader economic performance takes a hit.

A gap between awareness and action

The report draws on the Survey on Cyber Language and Executive Decision-Making, carried out in April 2026. It found that 42 per cent of respondents recognise cybersecurity’s measurable effect on economic output and markets. Yet only 9 per cent said their organisations see it as something that stabilises the economy. More than half admitted that cyber spending is still driven by crises, not by proven financial returns.

What leaders are being asked to do

The WEF’s Global Future Council on Cybersecurity sets out several steps.

Speak the same language. Boards, governments, investors and technical leaders should translate cyber risk into terms they already manage: resilience, continuity, trust, economic risk and stability. This matters most in a crisis, when poor communication between technical and executive teams can slow decisions and weaken the response.

Rethink the budget. Security spending, the report argues, should not be treated only as a cost of defence. It should be seen as “productive capital, not only as protection against loss.” According to the Council, cyber investment can create measurable value by cutting financial and operational exposure, building trust across business ecosystems, supporting digital transformation and improving governance and culture. Cyber capability should therefore feed into strategic planning and capital allocation, the report says.

Use common yardsticks. To keep things consistent across industries and countries, the report names six measures: service continuity, recovery credibility, dependency concentration, tail-loss exposure, value preserved, and the effect of cyber posture on the cost of capital. These would give boards, finance ministries and investors a standard way to weigh cyber posture in economic decisions.

Helping those with the least

The report also flags under-resourced economies and organisations, which face high exposure but have little capacity to absorb a major shock. To protect their basic capabilities, it calls for a sustainable funding mechanism that blends philanthropy, corporate giving, development finance and pooled funds.

Looking ahead

For 2027, the priority is to turn awareness into coordinated leadership across the public and private sectors to secure the wider digital economy.

For all the latest updates, download PGurus App.