76% of CISOs feel at risk of experiencing a material cyberattack in the next 12 months. This is up from 70% last year.

39.4% of organizations produce SBOMs due to customer and partner requirements.

While 65% of CISOs now say their organizations have taken steps to protect them from personal liability, one-third still feel they lack the resources to meet their cybersecurity goals.

43% of cybersecurity professionals identified distraction as a primary reason employees fall victim to cyberattacks.

26% of respondents indicated that AI-based cybersecurity tools are prioritised for funding.

74% of respondents stated that phishing is the leading threat, with impersonation of executives or trusted colleagues being the most common tactic.

Three in five CISOs (60%) worry about customer data loss via public GenAI tools.

63% of CISOs say they have experienced or witnessed burnout within the past year.

58% of CISOs say they are unprepared to respond to a material cyberattack in the next 12 months.

More than half (59%) of organisations restrict employee use of GenAI tools altogether.

Nearly a third of organisations still lack dedicated insider risk resources.

89.3% of organizations are already using AI-powered coding assistants.

Two-thirds of CISOs (which is 66%) experienced material data loss in the past year. This is up from 46% in 2024.

68% of organisations are exploring AI-powered defenses.

60% of organisations fear the rise of AI-generated threats.

41% of cybersecurity professionals identified lack of security awareness training as a primary reason employees fall victim to cyberattacks.

66% of CISOs say they would consider paying a ransom to prevent data leaks or restore systems. This figure rises to 84% in Canada and Mexico.

66% of CISOs report facing excessive expectations.

Boardroom alignment with CISOs has declined from a high of 84% in 2024 to 64% this year.

A decisive shift towards memory-safe languages has been adopted by 80.4% of companies.