National Australia Bank boss Ross McEwan says it’s a matter of when, not if, the banks are hit by a major cybersecurity incident.

McEwan is already losing sleep waiting for the call that puts him in the same shoes as his peers at Optus and Medibank, with investors and customers clamouring to know what digital crooks are doing with their data and hard-earned money.