36% of respondents from CNI organisations said improving cyber resilience is the biggest security challenge in 2026.

On average, 2.8 follow-up DDoS attacks occured after an initial incident, an 80% increase compared to the previous year.

65% of CISOs agreed that their organization prioritizes Cyber Resilience over traditional prevention, detection, and response.

67% of CISOs stated they are the primary executive responsible for ensuring Cyber Resilience within their organization.

In 2025, 83% of CISOs reported that Cyber Resilience was more critical for their organization than traditional cybersecurity measures, compared to 90% in the previous year.

In 2025, 68% of CISOs agreed that their organization currently has a Cyber Resilience strategy in place.

In 2025, only 38.4% of small business leaders felt 'very prepared' for a cyberattack, down from 56.5% in 2024.

65% of retailers intend to invest significantly in cyber-resilience processes across their business.

Organizations are most likely to make significant investments in cyber resilience processes across the business (33%).