38.5% of CISOs said GRC tools are too expensive.

66% of UK CISOs and senior security decision-makers believe that DORA will significantly increase cybersecurity costs in the long term.

30.3% of CISOs are challenged by control mapping in satisfying regulatory requirements.

Nearly 22% of CISOs said they haven’t looked at GRC tools yet.

Nearly one-third (33.2% of organisations) have incorporated automation without GenAI tools.

Just 16.3% of CISOs said they experienced cost savings when using technology to enhance their compliance program.

A staggering 80% of CISOs admit to unnecessary duplication in their compliance efforts.

Approximately four out of five (79.8% of CISOs) believe that a reduction in manual processing is the biggest opportunity to add automation to their compliance and risk management program.

The most commonly compromised password was "123456", being found in over 1.4 million breached credentials.

Only 5% of CISOs consider their organisation's compliance program to be optimised for efficiency and continuous improvement.

96% of UK senior security professionals say DORA will significantly enhance overall resilience across the EU and the EU business ecosystem.

59% of CISOs said they would become a whistleblower if their organisation was ignoring compliance requirements.

84% of organizations say a lack of transparency in applying AI applications within business processes is causing regulatory compliance issues.

42% of CISOs are challenged by data and system silos as a challenge in satisfying regulatory requirements.

More than 76% of chief information security officers (CISOs) at the World Economic Forum’s Annual Meeting on Cybersecurity in 2024 reported that fragmentation of regulations across jurisdictions greatly affects their organisations’ ability to maintain compliance.

25% of UK security professionals cite a short timeline to becoming compliant as a barrier to DORA compliance.