95% of organizations agree greater automation would improve their confidence that teams are focused on the most important risks.

54% say AI and automation would most help in validating whether exposures are realistically exploitable.

Three-quarters of organizations plan to invest in both cyber risk quantification tools and exposure assessment capabilities over the next 12–24 months.

58% of surveyed cybersecurity leaders say that everyday mistakes are a key driver of cybersecurity risks

97% of cybersecurity leaders are using metrics to track human-related cybersecurity risks, yet only 61% say these fully support their efforts

47% of UK employees confess that intense time constraints, cognitive overload, and everyday workplace distractions directly drive them to cut corners and make critical security errors, even when they are fully aware of safe protocols.

41% of local workers in the UAE & KSA admit that if official corporate AI tools are restricted or too slow, they will actively source their own unapproved agentic AI tools to bypass administrative blocks.

33.9% of Australian SME owners or managers reported experiencing malware.

1 in 7 of Austrailian SME owners or managers reported malware.

Responsibility for AI-related data risk is divided across organizations: IT 30.2%, security teams 29.8%, chief data officers 20%, and governance committees 18.7%.

76.1% of IT and security professionals say they would likely switch cybersecurity vendors due to concerns about data sovereignty, jurisdiction, or foreign government access to their data.

79.4% of IT and security managers and 72.8% of practitioners say they would likely switch vendors due to data sovereignty concerns.

Nearly 9 in 10 security decision-makers and practitioners agree that threat intelligence alone does not reduce risk unless it is continuously validated against actual exposure.

42% of cybersecurity leaders identify AI-enabled attacks as a top driver of future human-related cyber security risks

28.7% of Australian SME owner or manager cybercrime victims said cybercrime impacted the everyday function of their business

Of the 323 UK organisations that reported ransomware last year, more than 50 per cent were from Small Medium Enterprises (SMEs) (175 reports).

In the last 16 months, nearly 70% of Europe's ransomware activity was concentrated in Germany, the United Kingdom, France, Italy, and Spain.

Manufacturing was the most-affected sector at 27.9% of ransomware victims.

Germany reported 370 ransomware incidents (17.9%), the United Kingdom reported 347 (16.8%), France repored 255 (12.3%), Italy reported 240 (11.6%), and Spain reported 203 (9.8%) among ransomware incidents across Europe.

Within professional, scientific, and technical services, IT service providers were the single most-targeted subindustry by ransomware.