The above was a comment from a policy panel at Black Hat USA 2025. In part, it may be true, but improved cybersecurity posture is probably a result of financial risk. Financial risk, including any regulatory issues, is often mitigated through insurance, and cyber risk is no different to the more traditional insurances a company holds, which is why the cyber risk insurance market continues to grow. Another interesting comment from the panel concerned AI tools that provide confirmation of compliance with regulations and policy. The takeaway from the panel session for me is that there will continue to be more policy and compliance requirements.