Payments Security Should Enable, Not Just Prevent

Security in payments is often discussed through a defensive lens. The focus tends to fall on breaches blocked, fraud stopped and losses avoided. That framing captures only part of the picture, according to Mastercard's Ann Johnson, who argues that cyber risks are too complex for security to be judged solely by what it stops.

Speaking in an interview, Johnson described a need to rethink how security is defined. Rather than treating protection as an end in itself, she suggests the value of robust safeguards lies in the activity they make possible. Consumers and businesses can transact with greater confidence when the underlying systems are designed to withstand pressure.

That shift matters for digital payments, where trust is central to adoption. Security that works only as a barrier can limit innovation, while security designed as an enabler can support new services and broader participation. The question becomes not just whether risks are prevented, but whether safe commerce can proceed.

For payments firms, the implication is a broader view of resilience. Cyber threats will keep evolving, and no single control will eliminate them. But by measuring security through the confidence and access it creates, the industry can frame investment around both protection and progress.