Cyber Resilience Must Be Ensured
In the age of artificial intelligence, cyberattacks are no longer merely a technical problem. They pose a major threat to the economy, banking, national security and public trust. As the world moves towards 2027, a key question facing leading organisations is whether cyberattacks can be prevented entirely and, if not, how quickly normal operations can be restored after an attack.
The World Economic Forum’s 2026 cybersecurity report identifies artificial intelligence, geopolitical instability and vulnerabilities in technology supply chains as major sources of cyber risk. These concerns were also reflected in the virtual discussion titled ‘Cyber Resilience in 2027: What Leaders Need to Know’, held on October 21, 2026. Its key message was that organisations must not only prevent attacks but also maintain essential services during an attack and recover quickly afterwards.
Several findings from the World Economic Forum’s 2026 report are particularly significant. According to the survey, 94 per cent of respondents believe artificial intelligence will be the most significant factor shaping cybersecurity in 2026. Some 87 per cent reported an increase in AI-related vulnerabilities in 2025. Meanwhile, 73 per cent said they or someone they knew had fallen victim to cyber-enabled fraud in 2025. Among large organisations, 65 per cent identified third-party and supply chain vulnerabilities as major obstacles to achieving cyber resilience.
These figures need to be viewed in the proper context. They reflect the experiences and assessments of survey respondents and are not national statistics directly applicable to all organisations or citizens in Bangladesh. Similarly, discussions about risks in 2027 are assessments of possible future developments, not accounts of confirmed events. Nevertheless, the findings show that cybersecurity is no longer the sole responsibility of IT departments. It has become an essential component of business continuity and economic stability.
As digital banking, mobile financial services, online transactions and government digital services expand in Bangladesh, the responsibility to ensure security is also increasing. Even minor vulnerabilities in bank databases, customer identities, money transfers, card transactions and technology-dependent third-party services can cause significant financial losses, service disruptions and a crisis of public trust.
In the banking sector, simply installing security systems is not enough. Regular vulnerability assessments, suspicious transaction detection, multi-factor authentication, data encryption and secure backup systems must be ensured. Recovery procedures using stored data must also be tested regularly. During a crisis, having backup copies of data is not sufficient; institutions must ensure that essential services can be restored within the required timeframe.
Employee training and customer awareness are equally important. Criminals can exploit public trust through fake messages, fraudulent phone calls, identity theft and convincing fake voices and messages generated using artificial intelligence. Alongside technological safeguards, organisations must develop a culture of verifying suspicious requests, confirming identities and reporting fraud promptly.
In this regard, Bangladesh Bank, financial institutions, technology service providers and relevant government agencies need to establish rapid information-sharing mechanisms and coordinated crisis response systems. Interdependencies must be identified and joint preparedness measures taken to ensure that a cyberattack on one institution does not disrupt services at others.
First, recovery capabilities must be strengthened alongside preventive measures. The effectiveness of an institution’s security should be assessed not only by the number of safeguards it has installed but also by how quickly it can restore essential services after an attack, limit data loss and resume normal services for customers.
Second, the responsible use of artificial intelligence must be ensured. The technology can help detect suspicious transactions, analyse unusual behaviour and identify threats quickly. However, criminals can also use it to develop sophisticated scams, commit identity fraud and create convincing fake messages. Its use must therefore be supported by effective human verification, data privacy safeguards and appropriate oversight.
Third, accountability at the highest level of leadership must be ensured. Cybersecurity cannot be treated as the sole responsibility of IT departments. Boards of directors, risk management teams, internal audit departments and business continuity management units must work together. Assessments of potential losses, emergency funds, clear allocation of responsibilities, regular drills and transparent communication with customers during crises should all be planned in advance.
In a digital economy, the true test of security lies not merely in preventing cyberattacks but also in maintaining essential services during a crisis, limiting losses and restoring public trust quickly. Preparing for 2027 is therefore not simply a matter of purchasing new software or advanced technology. It also requires skilled personnel, regular training, adequate investment, institutional coordination and leadership accountability.
Bangladesh must now treat cyber risks as national economic risks. In particular, the country needs to strengthen security in banking and financial services while building the capacity to respond to disruptions and recover quickly. Once trust in digital systems is broken, technology alone cannot restore it. Transparency, expertise, accountability and responsible leadership are equally essential.
The writer is a banker, researcher and columnist.
