CFO Slice

A growing web of connected industrial systems, supply chains, and critical infrastructure is transforming cybersecurity from a technical issue into a broader business resilience challenge, according to Nexa Resources Chief Information Security Officer Marco Túlio Moraes. As operational technology (OT) environments become more interconnected, cyber incidents can increasingly trigger disruptions that extend beyond individual organizations, affecting suppliers, critical services, and national economies. Moraes argues that traditional governance frameworks have not kept pace with this shift. He says organizations need clearer accountability for cyber risk, stronger integration of cybersecurity into enterprise decision-making, and a move away from fragmented ownership models where responsibility is spread across multiple departments and external partners. Rather than focusing solely on security controls, companies should adopt scenario-based risk assessments that examine how cyber disruptions could cascade across interconnected assets and ecosystems. Moraes also advocates for greater use of independent audits and external assessments to validate resilience and governance effectiveness.