When the CISO meets the Head of Treasury to build Operational Resilience

On April 1, 2026, Astran convened a closed workshop bringing together 15 Treasury Directors and Chief Information Security Officers from major organizations. The session centered on three questions: who should own resilience, which activities are truly vital, and what Treasury and Cyber each bring to building a Minimum Vital Company.

What you will find in this report

• Why Resilience ownership cannot sit in a single silo, and why Executive Committee sponsorship is the single most critical enabler.
• How the 5 Vital Activities framework maps onto the real concerns of Treasury and Cyber leaders.
• What Treasury uniquely brings to the MVC: cross-cutting process expertise, banking relationships, and the ability to stress-test financial continuity.
• Why the CISO must act as Resilience leader, and what “honesty about the realistic scenario” actually means in practice.
• The key takeaways from the group: anticipation, crisis exercises, fraud risk, and the concept of robustness over performance.

Who should read it

This report is for CEOs, CFOs, CISOs, Treasury Directors, and Resilience leaders who need a grounded operational account of what it looks like when two critical functions align around a shared resilience strategy.

Get the full version

Download the complete PDF edition of “When the CISO meets the Head of Treasury to build Operational Resilience” directly from the sidebar.