The Revolut case: cyber risk beyond technology - Andrea Puccio interviewed by Borsa&Finanza

Cybersecurity is no longer just an IT issue: it is now a matter of corporate governance, compliance and organisational design.

The Revolut case, a sophisticated impersonation scheme that began with the compromise of an institutional certified email (PEC) account, shows that attackers exploit not only technical weaknesses but also the trust placed in communications that appear legitimate.

Speaking to Borsa&Finanza, our Founding Partner Andrea Puccio stresses that companies must continuously strengthen their control frameworks, with systems that can both detect threats early and respond to them effectively.

"One principle is now inescapable: cybersecurity, compliance and the 231 Model can no longer be treated as separate silos. They are components of a single, integrated system for protecting the business."

An integrated approach to cyber risk therefore requires IT security, organisation and internal controls to be approached as closely interlinked.

Read the full article in Italian here.