Cybersecurity Tops CFO’s Risk Agenda With 99% Reporting Incidents and 94% Planning to Increase Spend

• Nearly every UK CFO surveyed (99%) has faced a payments-related cyber incident in the past two years¹, with cybersecurity now their number one operational risk.
• Appetite for automation is universal with Accounts Payable the top priority, but integration challenges with existing systems keep finance leaders exposed and inefficient.
• Real-time oversight is seen as essential, yet only 64% of those surveyed are confident that their systems can deliver it² – highlighting the need for modernised, unified solutions.

LONDON--(BUSINESS WIRE)-- New research commissioned by global S&P500 corporate payments company, Corpay, finds that 99% of UK finance leaders surveyed have experienced payments-related cyber incidents in the past two years, exposing the fragility of legacy systems and an urgent need for change.

With finance functions now a frontline target, the research saw ‘cybersecurity threats’ attract the largest percentage of responses (42%) from surveyed CFOs when asked what operational risk they were most concerned about over the next 12-24 months. In addition, nearly all of those surveyed (94%) plan to increase cyber investment over the next year³, with more than half (51%) preparing a significant uplift.

The findings from a survey of 150 UK CFOs reflect the pressures facing finance leaders today as they work to manage risk, control costs, and modernise operations in an increasingly complex and interconnected payments landscape⁴.

In response, finance leaders are turning to automation to bolster resilience and cut inefficiency. More than half (54%) of CFOs surveyed identified Accounts Payable as the area of their finance operations they would most like to improve through automation, followed by expense management (53%), cross-border payments (47%), and fraud detection and prevention (42%). Every CFO surveyed expressed an appetite for automation, underscoring a universal demand for digital transformation.

However, barriers to progress remain. Almost half of CFOs surveyed (47%) cite integration with existing systems as the most significant barrier to automation, followed by resistance to change within the organisation (41%), cybersecurity and data privacy concerns (37%), and budget limitations or a lack of in-house expertise (32%). The findings suggest that legacy systems are not only inefficient but also widen the threat surface, keeping organisations and finance teams exposed, even as investment in cyber defences is predicted to ramp up.

Real-time visibility also emerged as a key challenge. 94% of CFOs surveyed say real-time oversight of finance and payments is important⁵, with half describing it as very important, yet only 64% feel confident their processes are optimised for cost control and efficiency.

Piero Macari, Vice President of Products at Corpay, said:

“Given that cyber threats are now universal, increasing automation within the financial processes of an organisation can support CFOs in minimising cyber attacks. With 99% of surveyed CFOs reporting some form of payments-related incident, and 94% indicating the importance of real-time visibility, it’s clear the status quo is unsustainable. Legacy systems are no longer just an inconvenience – they’re a liability.

“This research reinforces why we developed Corpay Complete in the first place: to meet the real challenges CFOs are facing right now. Between the acceleration of digitisation, the rise of embedded finance, and reported skills shortages within finance teams, CFOs are under pressure to do more with less. Corpay Complete is purpose-built to give CFOs and finance teams real-time visibility and greater control. It’s a unified, mobile first platform for accounts payable, domestic and international transactions, and expenses that helps finance teams work smarter, move faster, and manage risk with confidence.”

The research highlights that finance leaders are ready to act but are constrained by outdated systems, fragmented processes, and a lack of visibility. Corpay Complete, launched earlier this year in the UK, provides an opportunity to make the change needed. By unifying and digitising Accounts Payable processes, including domestic and international payments, as well as corporate card expenses, it enables CFOs to automate manual processes, minimise threats, and gain total visibility across every transaction.

About Corpay

Corpay (NYSE: CPAY) is a global S&P500 corporate payments company that helps businesses and consumers pay expenses in a simple, controlled manner. Corpay’s suite of modern payment solutions help its customers better manage vehicle-related expenses (like fuelling and parking), travel expenses (like hotel bookings) and payables (like paying vendors). This results in our customers saving time and ultimately spending less.

Corpay – Payments made easy.

‘Corpay' and 'Corpay Complete' are trading names of Allstar Business Solutions Limited. Payment services provided by Allstar Business Solutions, Canberra House, Lydiard Fields, Swindon, Wiltshire, SN5 8UB, Registration Number 2631112 GB. Allstar Business Solutions is authorised by the Financial Conduct Authority under the Electronic Money.

Regulations 2011 (register reference 900470) for the issuing of electronic money and the provision of payment services.

'Cambridge Global Payment' and 'AFEX' are trading names that may be used for the international payment solutions and risk management solutions provided by certain affiliated entities using the brand 'Corpay'. International payment solutions are provided in the United Kingdom through Cambridge Mercantile Corp. (UK) Ltd.

To learn more visit www.corpay.com

____________________________

1 ‘Yes, significant breach’ and ‘Yes, minor incident’ answers combined.

2 ‘Very confident’ and ‘Somewhat confident’ answers combined.

3 ‘Increase significantly’ and ‘Increase slightly’ answers combined.

4 Methodology: the research, conducted by Censuswide between 08.09.2025 – 15.09.2025, surveyed 150 CFOs in the UK, aged 18+ excluding sole traders, in the following industries: Retail, Wholesale, Manufacturing. Censuswide abides by and employs members of the Market Research Society and follows the MRS code of conduct and ESOMAR principles. Censuswide is also a member of the British Polling Council.

5 ‘Very important’ and ‘Somewhat important’ answers combined.

 

View source version on businesswire.com: https://www.businesswire.com/news/home/20251008745273/en/

Scott Girling-Heathcote. SkyParlour for Corpay

scott@skyparlour.com

+44 (0)330 043 1315

Source: Corpay