Of the organisations that measure the operational cost of managing compliance, 14.5% track compliance expenses.

60% of manufacturers and 52.5% of software and IT services companies see the biggest barrier to adopting Compliance as Code is that no one is using the technology.

Roughly two-fifths of CISOs are challenged by evidence gathering (41.5%) as a challenge in satisfying regulatory requirements.

More than one-third of organisations (34.2%) hope to achieve their KPIs for compliance benchmarks by incentivizing success or by penalizing failure, or by implementing both incentives and penalties.

86% of respondents said privacy training and awareness programs had a positive impact on overall employee privacy awareness.

15% of CISOs ranked compliance status as a top performance metric, compared to 45% of boards.

50% of CISOs said that, on an annual basis, they spend more than $200,000 worth of capital and dedicated staff resources to achieve and maintain compliance across their organisation.

41% of CISOs said that OSCAL adoption is hindered by both a lack of usage and a difficulty in understanding its importance.

82% of respondents use a framework or law/regulation to manage privacy in their organisation.

33.5% of CISOs are challenged by audit readiness in satisfying regulatory requirements.

Over a billion credentials were stolen in malware attacks within a 12-month period.

Almost all (94.2% of CISOs) believe that continuous controls monitoring will improve both compliance and security.

88% of UK senior security professionals believe that DORA will be beneficial.

54.2% of respondents to the CISO Society survey feel that they have the talent to meet future regulatory requirements.

82% of businesses report increased compliance risks due to a lack of control caused by a more complex landscape.

Research shows over 210 million compromised passwords.

More than one-third (37.2% of CISOs) said that no platform has demonstrated its reliability for Compliance as Code.

46.2% of organisations said they don’t have a sufficient budget to invest in GRC tools.

Stolen credentials are involved in nearly half (44%) of all data breaches.

78% of UK senior security decision makers reallocated budget from other business areas to meet DORA compliance requirements.