Excerpt from a 2026 YouTube panel (WEF) where Speaker A (Michelle Zatlyn) argues that effective cybersecurity/resilience begins with organizational planning: knowing current state, desired state, and priorities so unexpected events can be triaged against an existing plan. Speaker A stresses that responsibility is company-wide — not only the Chief Security Officer — and extends to employee training and broader "digital citizenship." She echoes points made by Jurgen and responds to Amy's question; frames digital citizenship as a business and societal topic.
Chapters
The other thing I would add, and I agree with all these sorts of things, is the best organizations that do this have a plan. And it's almost like they know where they are, even if they give themselves low marks and they know where they want to get to, and they start to make progress there in a systematic way. And so when something unexpected comes up, you look at your priority list and you say, where does this fit? How big compared to all the other things that we already have a plan to do? The most vulnerable organizations don't have a plan, and they don't even want to talk about, you know, where, what grades they would give them in the different areas. And so really, to be in the top, you just need to start with a plan and kind of go through with your leadership team saying, where are we? How are we? If we. If something happened, how would we respond? And you start to kind of march through building a plan and making progress. And you look back after one year, two years, and you're like, wow, we've made a lot of progress. And so when things come up, you're in a better place to remediate and respond, which I think is really important. And I couldn't agree more about what Jurgen said about it. Your question, Amy, about how it's certainly not just the chief security Officer's job, it is the whole company's job. And the more that you train your employees, all tides rise. And actually, it's not even employees, it's citizens. We need better digital citizenship. And actually, if everyone becomes better digital citizens, the whole world gets stronger from this. And so you can't just relegate this to your security team. It's a business topic, it's a team topic, and really, it's a digital citizenship topic. I love that the digital citizens. It feels like a HBR article waiting to be born.
