26% of Defense Industrial Base members reported spending between $100,000 and $250,000 on Cybersecurity Maturity Model Certification preparation as of November 2025.

68% of Defense Industrial Base members reported that preparing for Cybersecurity Maturity Model Certification has taken them over a year as of November 2025.

54% of Defense Industrial Base members reported starting their Cybersecurity Maturity Model Certification journey with a strong implementation of NIST 800-171 standards and DFARS controls.

37% of Defense Industrial Base members are not scheduled for a Cybersecurity Maturity Model Certification assessment or are unsure of their next steps.

60% of Defense Industrial Base members reported an increase in training staff on cybersecurity since last year, up from 37% .

14% of Defense Industrial Base members are considering using a cloud service provider for Cybersecurity Maturity Model Certification compliance in the future.

53% of Defense Industrial Base members are currently using a cloud service provider to minimize their Cybersecurity Maturity Model Certification scope.

45% of firms in the financial services sector prioritize automated evidence collection and document management for enhancing audit readiness and control visibility.

42% of U.S. financial services executives identified staying current with evolving regulations as their top compliance challenge.

61% of healthcare organizations cite compliance requirements as important security drivers.

36% of U.S. financial services executives reported lacking sufficient internal expertise to meet regulatory mandates.

50% of firms in the financial services industry are still operating on outdated or on-premise infrastructure, which fails to meet modern transparency and documentation requirements.

91% of organizations say their cloud infrastructure provides the flexibility to adapt to new regulations.

51% of firms identified data discovery as a top priority for improving audit readiness and control visibility.

53% of CFOs in the financial services sector ranked evolving regulations as a top concern, compared to 38% of CIOs, highlighting a disconnect between financial and technical teams.

64% of financial services organizations cite compliance requirements as important security drivers.

Meeting regulatory requirements is cited as a key challenge to using AI by 30% of nonprofit funders.

51% said the public cloud was best positioned to meet regulations vs 41% that responded on-premises.

81% agree that their primary cloud provider’s native security and compliance capabilities exceed what their team could deliver independently.

76% of security and compliance leaders reported that AI and automation tools are reducing burnout and improving day-to-day productivity in 2025.