Cyber is the leading cause of both IT downtime and data loss for the fourth consecutive year.

30% of organisations cite cyber incidents as their biggest cause of IT downtime over the last 12 months, ahead of hardware failure at 19%.

43% of large organisations reported losing data as a result of a cyber attack.

39% of organisations cite integrating IT and business resilience as their leading resilience priority, just ahead of updating continuity plans (38%) and improving backup processes (38%).

Only 18% of organisations that suffered a ransomware attack paid the ransom, while 59% recovered from backups.

76% of organisations believe they are more resilient than they were 12 months ago.

85% of healthcare practices experienced at least one operational disruption caused by a third-party or vendor-of-a-vendor failure in the past 12 months.

63% of healthcare practices do not continuously monitor their digital supply chains.

31% of healthcare practices are still running on legacy systems that cannot contain a breach quickly once it starts.

52% of healthcare practices have no managed security service provider (MSSP).

39% of healthcare practices manage cybersecurity entirely in-house.

23% of healthcare practices describe their technology as antiquated.

42% of healthcare practices that partner with an MSSP report better access to managed threat detection and response.

35% of healthcare practices that partner with an MSSP report better access to next-generation firewalls.

63% of U.S. knowledge workers report having a clear AI policy that they understand.

63% of workers rate AI as either absolutely essential or very necessary to their jobs.

47% of organizations favor automation for low-risk environments, up 22 percentage points.

60% of security professionals state they require stronger LLM testing capabilities.

42% of security professionals plan to increase human-led red team operations.

The meantime to resolve (MTTR) for AI/LLM security issues is 36 days, up from 19 days in 2025.