At the 62nd Munich Security Conference (MSC) on 13–15 February, political leaders spoke of rising defence spending and a race to harden digital and physical infrastructure.
For companies and investors, the message was clear: geopolitics is not a backdrop but a structural driver of regulation, capital flows and operational risk.
Legal and regulatory consequences now follow hard on the heels of geopolitical shocks: sanctions, export controls, investment screening, data and cyber rules and defence-industrial policy. Many boards now treat Munich as an early warning system for where policy will strike next.
Key takeaways for business
- Geopolitics and security are now structural: boards should treat shifting policies as a core planning assumption, not a tail risk.
- Cyber AI convergence and energy security are moving from specialist topics to mainstream regulatory and financing issues, reshaping disclosure duties, due diligence and contractual risk allocation.
- Defence, dual use technology and resilience solutions are a medium to long term growth market, but access will depend on early positioning on compliance, export controls, data and security requirements and “trusted” supply chain status.
- Climate resilience is shifting from an environmental add on to a security requirement, shaping asset planning, supply chain design and continuity strategies.
- Regulatory fragmentation across the Atlantic is likely to deepen, forcing multinational businesses to navigate overlapping and sometimes conflicting regimes.
Implications for boards, financiers and investors
- Contracts and supply chains: More frequent use of sanctions, export controls and localisation rules will require clearer allocation of geopolitical and regulatory risk in contracts and financing documents.
- Capital allocation and M&A: Defence, cyber, dual use and infrastructure asset, including climate resilience assets, are in focus, but transactions in these sectors will be subject to tighter foreign direct investment (FDI) screening and security related conditions.
- Governance and disclosure: Regulators are sharpening expectations on cyber governance, AI use, climate risk and sanctions compliance. Boards need clear responsibility lines and evidence that risk frameworks match the new environment.
- Financing structures: Green and transition finance is being joined by “resilience linked” themes, with lenders and investors scrutinising cyber, climate and supply chain robustness alongside traditional sustainability metrics.
