If we have selected the wrong experience for you, please change it above.
How CFOs can turn cybersecurity spend into measurable risk reduction
CFO Insights
As cybersecurity merger and acquisition (M&A) activity continues to accelerate, companies are confronting the cost and complexity of tool sprawl. In 2025 alone, acquisitions rose 5% and disclosed deal value jumped 82%, signaling a shift toward integrated platforms. For CFOs, the message is clear: it’s time to take a closer look at your cybersecurity investment strategy before renewal cycles lock in more complexity and potential risk. This edition of CFO Insights explores the questions to ask and the steps to take.
The average enterprise now manages 83 separate security tools sourced from about 29 vendors. Decentralized purchasing and emerging attacks and vulnerabilities are just two factors that often lead to a bloated ecosystem, which can complicate cyber risk quantification efforts. Couple that with converging developments—like the speed of evolving threats, human and machine identities that need to be protected, and board scrutiny of cyber incidents—and the impact of tool sprawl is now a more urgent financial and governance issue.
Our recommendation? Start with a focused portfolio review to map each tool to the risk it addresses and flag redundancy. Demand financial quantification of cybersecurity risk—tying priority threat scenarios to plausible dollar impact rather than relying on heat maps. Build CFO-CISO co-governance, with the CFO co-owning risk appetite and pressure-testing the investment thesis behind major decisions. Scrutinize the full economics of consolidation, testing whether the savings are real and whether concentration risk is being created. And embed regulatory obligations as guardrails, separating compliance-driven spend from risk-driven spend.
Together, these steps reframe the CFO from cost controller to co-governor who turns cyber spending into measurable business value. And, this edition of CFO Insights offers recommended strategies for finance leaders through the process and ask the right questions along the way.
Download the full report here.
About Deloitte's CFO Program
The CFO Program brings together a multidisciplinary team of Deloitte leaders and subject-matter specialists to help CFOs stay ahead in the face of growing challenges and demands.
