Cyber skills aren't optional: Why business leaders need to speak security fluently

SKIP TO CONTENT

Cyber skills aren't optional: Why business leaders need to speak security fluently

Every seven minutes, an Australian business reports a cyber incident.

2 min read | 18 August 2025

Cyber attacks jumped 25% just in the second half of 2024, with organisations reporting 1,113 data breaches. The Australian Cyber Security Centre reports that cybercrime costs Australian businesses an average of $4.5 million per breach.

These numbers should serve as a reality check for every leader who thinks cybersecurity is someone else's responsibility.

If you're in a non-tech leadership role, you can – and should – entrust the work to the experts, but you can't delegate responsibility for cyber risk. A cyber-attack doesn't impact just the IT department. It's usually a financial, operational and reputational challenge that affects the entire company.

Mindset change

Many business leaders still approach cybersecurity as a technical problem – something for the IT team to sort out or something they'll deal with when it becomes urgent. By then, the damage is often done.

One reason leaders struggle to give sufficient attention to cybersecurity is that it's primarily about prevention. The best work stops attacks and protects data, which makes it inherently challenging to evaluate its importance when everything is going well.

The relevance of cybersecurity becomes really evident when things go wrong. At that moment, most leaders regret not having focused more on the issue.

Another reason leaders often neglect cybersecurity or make investment mistakes is a lack of knowledge. Traditional business education focuses much more on areas that leaders deal with daily, such as financial statements and market analysis, rather than technical subjects like cyber risk.

This made sense for decades, but the digital transformation of businesses and the expansion of attack possibilities, followed by criminals' growing capabilities, have completely changed the balance.

Creating the right culture

In a world where most companies fundamentally depend on technology to operate, ensuring no one can affect this ability makes cybersecurity a responsibility for the entire organisation.

The problem is that not only many leaders think this is an IT problem – almost everybody else does too.

One role of non-technical leadership is to change this mindset and create an environment where most workers share responsibility and understand the stakes. To do that effectively, these leaders need to know what they're talking about, what's required and the consequences.

Another role is creating bridges between technical teams and the rest of the organisation. IT teams often struggle to communicate the business impact and rationale behind their measures and processes. Most employees don't realise the importance of paying attention to them until they're locked out of their computers by an attack.

Company leaders need to ensure these groups understand each other and that the right actions are taken and followed. In short, ensure the company has strong governance.

A more obvious role of leaders is deciding on cybersecurity investments. Here, too, cyber skills and fluency are fundamental. Leaders must ask the right questions, evaluate security proposals, and assess whether decisions are working.

How to develop cyber fluency

Most leaders would agree they need to know more about cybersecurity. But they're busy people, typically with a long list of other responsibilities.

If that's your case, you don't need to become a cybersecurity expert overnight, but you do need to start learning. The first step is embracing that this is part of your commitments.

You can start by incorporating cybersecurity into your regular discussions or making time to dive deeper into the subject. Find out what metrics (like incident reports) you should be reading or learn about frameworks like the Essential Eight, developed by the Australian Cyber Security Centre.

Look for executive-focused cybersecurity programs that translate technical concepts into business language. Seek out courses covering governance, risk management, and incident response.

Make cybersecurity education an ongoing commitment. The threat landscape is constantly changing, and your knowledge must evolve accordingly.

The next steps

Cybersecurity fluency is essential for effective governance in the digital age. The question isn't whether you'll face cyber threats but whether you'll be prepared when they arrive.
The leaders who will thrive in the coming years will be those who can navigate both business strategy and cyber risk with confidence.

Ready to develop the cybersecurity fluency your leadership role demands?

The time to start is now.

18 August 2025

Share

Related courses and degrees

Cyber Security Risk and Strategy

Future skills short course

2 November 2026
AU$1,900 incl. GST
Online
6 weeks

Online Graduate Certificate in Cyber Security

Online postgraduate study

No upcoming intakes

AU$16,320 (2026 total)
Online
Full-time 9 months, Part-time 1 year

Related Articles

Data-driven decision-making forms the core of modern business analytics

09 Jul 2026

The great American composer and economist W. Edwards Deming had a good quote: “In God we trust. All others must bring data.”

rmito-blog-nigeldaltonhowtostayrelevantinanaiworld-refimage-1220x732.jpg

Nigel Dalton on how to stay relevant (and employed) in an AI world

10 Nov 2025

Last month, as part of RMIT Online’s Future Skills Fest, we ran an online workshop with Nigel Dalton, a social scientist at Thoughtworks. The topic was ‘Teenagers Have AI Startups. Midlife Has Wisdom. Who Wins?’

5 Ways Mid-Career Professionals Can Stay Relevant in the AI Era

15 Sep 2025

AI is moving pretty fast. Three teenagers just launched a $2 billion AI startup in America this year (and they’re not even old enough to vote yet). If you’re still figuring out your first ChatGPT prompts, the whole thing can feel overwhelming.

rmito-blog-cybersecurityisntoptional-refimage-1220x732.jpg

Cyber skills aren't optional: Why business leaders need to speak security fluently

18 Aug 2025

Every seven minutes, an Australian business reports a cyber incident.

View all articles

Connect with us

Be part of the conversation and keep in touch with us to find out about study options, campus life and upcoming events on our social media channels.

aboriginal flag float-start

torres strait flag float-start

Acknowledgement of Country

RMIT University acknowledges the people of the Woi wurrung and Boon wurrung language groups of the eastern Kulin Nation on whose unceded lands we conduct the business of the University. RMIT University respectfully acknowledges their Ancestors and Elders, past and present. RMIT also acknowledges the Traditional Custodians and their Ancestors of the lands and waters across Australia where we conduct our business - Artwork 'Sentient' by Hollie Johnson, Gunaikurnai and Monero Ngarigo.

Learn more about our commitment to Aboriginal and Torres Strait Islander peoples

aboriginal flag float-start

torres strait flag float-start

Acknowledgement of Country

RMIT University acknowledges the people of the Woi wurrung and Boon wurrung language groups of the eastern Kulin Nation on whose unceded lands we conduct the business of the University. RMIT University respectfully acknowledges their Ancestors and Elders, past and present. RMIT also acknowledges the Traditional Custodians and their Ancestors of the lands and waters across Australia where we conduct our business.

More information