97% of respondents indicated that Network/infrastructure security requires significant or moderate improvement.

95% of respondents indicated that the Regulatory landscape requires significant or moderate improvement.

95% of respondents indicated that Endpoint security requires significant or moderate improvement.

40% of companies are implementing dedicated cybersecurity roles to improve the effectiveness of their cybersecurity program.

60% of extortion scam targets are male.

Nationally (UK) significant incidents represented 48% (204) of all incidents between September 2024 and August 2025, a significant increase from last year (89).

45% of extortion victims are parents.

There were 62 nationally (UK) significant incidents reported between September 2022 and August 2023, 4 of which were categorised as highly significant in nature.

There were 63 nationally (UK) significant incidents reported between September 2021 and August 2022, 1 of which were categorised as highly significant in nature.

45% of medium companies (100-499 employees) are concerned with the emergence of generative AI.

47% of large companies (500-9999 employees) are concerned with the emergence of generative AI.

46% of large companies (500-9999 employees) are concerned with the variety of attacks.

42% of medium companies (100-499 employees) are concerned with the variety of attacks.

34% of small companies (<100 employees) are concerned with nation-state actors.

30% of medium companies (100-499 employees) are concerned with nation-state actors.

40% of large companies (500-9999 employees) are concerned with nation-state actors.

42% of very large companies (10000+ employees) are concerned with nation-state actors.

35% of small companies (<100 employees) are concerned with the breadth of skills needed.

34% of medium companies (100-499 employees) are concerned with the breadth of skills needed.

35% of companies are exploring emerging cyber trends more.