Managed Security Services: CISO Does Not Bear Sole Liability
Benedikt Langer
8 min. read In many organisations, the CISO is seen as the person who stands accountable for security. ...
6 min read
For years, CIOs sold IT budgets with a vision of transformation. That no longer works. After multiple rounds of expensive digital projects and disappointing AI returns, boards and CFOs now demand something else: defensibility. The most ambitious roadmap no longer wins the budget-it’s the one with the most robust justification. 57 percent of CIOs face productivity pressure, 52 percent cost pressure. The slide deck isn’t enough anymore.
Key Takeaways
Related:Who is liable when the AI agent goes wrong? / How capital markets are pricing AI governance
What is Value Realization? Value Realization refers to proving that an investment has delivered the promised benefit. In IT terms, it means the project isn’t the success-it’s the measurable business improvement it triggers. Boards now demand this evidence systematically.
The shift is fundamental. For years, the pattern was: the CIO presents a digital strategy, the board approves it because nobody wants to miss the boat. That era is over. After waves of heavy investment whose returns fell short of promises and AI pilots that rarely tipped into productive value, boards and CFOs now ask tougher questions. They no longer react to proposals; they audit the IT organization.
Hence, the currency of budget talks has changed. It’s no longer measured in ambition, but in decision logic and verified outcomes. A CIO arguing with future visions loses to one who shows which KPI moves-and by how much-with which spend. Defensibility is the new watchword, and it’s more uncomfortable than any vision.
The reason lies in the experiences of recent years. Many companies have invested in cloud migrations and AI initiatives whose benefits did not materialize as promised in the business case. The board has learned that a compelling presentation and measurable results are two very different things. This lesson has sunk in, and it is reshaping every subsequent discussion.
For the CIO, this is not a threat but a clarification. Those who consistently deliver results benefit from the fact that outcomes now matter more than rhetoric. The challenge arises only for those who have secured budgets based on urgency and fear of missing out. Their argument has run its course. The reflex to avoid falling behind no longer holds when the board asks what concrete benefits were gained from the last avoided missed opportunity.
Exhausted Argument
Sustainable Argument
The first step is a dedicated budget line for change management and value realization. Those who fund only the project-but not the work that actually unlocks the benefits-often end up with the expensive project without the promised returns. Making value realization visible in the budget signals to the board that the CIO understands the difference between expenditure and impact.
The second step concerns sourcing sovereignty. Geopolitical tensions and sovereignty requirements are reshaping supplier selection. Those who actively manage geo-risks-by balancing regional providers and strengthening on-site support-demonstrably perform better. Analyses indicate a 50% higher likelihood of exceeding expectations. Yet only about a quarter of CIOs are doing this today. Here lies a concrete, defensible lever that both reduces risk and boosts performance.
A vision wins applause in the meeting. A metric that has demonstrably moved wins next year’s budget.
The third step is an attitude, not a method. The CIO proactively drives the conversation about IT value with the CEO and CFO, rather than waiting for it to happen. Those who ask first which investment delivered which proven benefit control the discussion. Those who wait for the CFO to ask respond defensively. Defensibility begins by posing the uncomfortable question before it is posed to you.
Because years of heavy investment in digital transformation and AI have often failed to deliver the promised returns. Boards and CFOs are now evaluating IT departments based on measurable outcomes rather than proposals. Budgets are won through decision logic, not ambition.
It means proving that an expenditure has directly influenced a specific KPI. This requires a dedicated budget line for value realization, actively managed sourcing, and a willingness to openly demonstrate your own benefits.
Proactive geo-risk management in sourcing reduces risk while measurably improving performance. CIOs who adopt this approach often exceed expectations-and it’s a lever that can be justified factually to the board.
Not necessarily. Those who deliver results benefit from the new focus on outcomes. The challenge arises only for budgets previously secured through urgency rather than impact.
Take the lead early. By asking which investments have delivered proven value, you guide discussions with the CEO and CFO. Waiting for the question to come from outside forces you into a defensive stance.
More from the MBF Media Network
Image source: AI-generated (May 2026)