Trust in a connected world: why cyber resilience matters

By Emma Smith, Global CISO, Vodafone

Connectivity is critical to society. Technology underpins almost every part of modern life. It connects people, powers businesses and supports critical services that society depends on every day. Whether making a payment, accessing healthcare, running a business or staying in contact with loved ones, people rely on digital services being available, secure and reliable.

In a digitally enabled, AI-world that relies on constant connection, cyber risk is real and can never be eliminated entirely. Every organisation can choose how to prepare and manage this risk. Cyber resilience is the ability to anticipate disruption, absorb impact, recover quickly, and learn from experience. It is the ability to keep going under pressure and withstand adversity. For Vodafone, cyber resilience is a responsibility that we embrace and is deeply connected to our purpose of connecting everyone.

Why cyber resilience matters more than ever

We are at a defining moment. Technology is advancing rapidly, the threat landscape is evolving, and the pace of change is accelerating. At the same time, society’s digital dependency continues to deepen. When digital services are disrupted, even briefly, the impact goes far beyond IT. Financial transactions can be interrupted, public services can be affected and confidence can be shaken.

The telecommunications industry is faced with a unique set of risks, providing connectivity services for individuals, businesses and governments, as well as handling private communications data. People and organisations rely on that infrastructure, especially when it matters most. This makes resilience much more than a technical concept, but a business imperative and societal priority.

Cyber security is not a fixed state - there will always be more to do. As technology advances, threats become more sophisticated and business priorities shift, the attack surface continues to expand. In that environment, security cannot stand still and we must be restless for more.

That means moving beyond the idea of being secure at a point in time, to building the capability to stay secure over time. The fundamentals – strong controls, good hygiene and clear processes matter more than ever. Cyber attacks are part of the technology landscape today and will be in the future. Resilience comes from understanding risks and threats, knowing what matters most, being prepared to make effective decisions under pressure and learning from experience.

Building resilience into the fabric of business

Security and resilience are most effective when embedded into how an organisation operates. That means embedding security consistently, designing for recovery as well as protection, and having the right governance in place. It also means recognising that resilience is about people as much as technology. Under pressure, what matters is not only the tools you have in place, but how well teams work together and how clearly decisions are made. Strong collaboration, clear accountability and a willingness to keep learning are all essential.

Modern environments are complex. They can span multiple clouds, interconnected systems and expanding digital ecosystems. New technologies, such as AI, bring both opportunity and risk. While many organisations understand the controls that matter, applying them consistently can be challenging.

At Vodafone, cyber resilience is not simply about managing technology risk. It is deeply connected to our purpose – keeping people, businesses and critical services connected, secure and able to keep moving. We cannot control every threat, but we can focus on being well prepared, responding effectively and reducing the impact of disruption where possible.

Our approach is globally aligned and locally enabled, bringing together our local capabilities across Europe and Africa with global capabilities. Our scale means we benefit from global collaboration, technology sharing and deep expertise, and ultimately have greater visibility of emerging threats. We have implemented a globally consistent cyber security operating model, designed to help reduce risk by continuously identifying threats, protecting, defending and improving our security.

Stronger together

In our interconnected world, resilience requires all of us to look beyond our own organisations. Resilience is strengthened not only by the actions we each take, but by the standards we help raise across the wider ecosystem. We are proud to work with government, industry peers and suppliers to strengthen cyber resilience. As one of the UK Government’s strategic suppliers and a provider of critical national infrastructure, we know that resilience requires sustained focus, investment and collaboration.

Every organisation has a role to play in strengthening its own defences, raising standards across its supply chain and supporting others to do the same. Through sharing, we learn and improve. By working together to tackle common challenges, we build a more resilient digital ecosystem for everyone. As technology continues to evolve and threats continue to adapt, our collective ability to anticipate, withstand and recover from disruption will become increasingly important.

A secure and resilient connected future

Cyber resilience is not a destination. Organisations need to stay grounded in the fundamentals of good security, adapt as threats evolve and keep learning.

For leaders, the priority is clear: focus on outcomes, maintaining customer trust and embedding cyber resilience into how the business operates. In a fast-moving world, trust is built not only by preventing disruption where we can, but by being ready to respond effectively when it matters most. That is how we create a more secure and resilient connected future for everyone.