55% of security and IT leaders cite AI agents, agentic infrastructure, and Gen AI applications as the biggest cybersecurity risk to their organization.

39% identify AI security and risk management frameworks as their top priority for reducing cyber risk over the next three years.

85% believe Cyber Resiliency is transforming how IT and Security organizations approach cyber risk.

Only 16% of organisations are measuring the potential financial impact of cyber risks (risk quantification) to a significant extent.

13% of small businesses believe they are less vulnerable to cyber attacks, despite the risks.

92% of organisations attribute at least some data loss to departing employees. This is up from 73% last year.

61% of cybersecurity professionals plan AI adoption as manufacturing faces increasing cyber risks.

61% of cybersecurity professionals plan AI adoption as manufacturing faces increasing cyber risks.

Just 29% of organisations have a formal cyber program that is truly aligned with business objectives.

Organisations with strong asset visibility are 2.5 times more likely to communicate cyber risk effectively to the board

Rapidly expanding attack surfaces are cited by 38% of cybersecurity and cyber risk leaders as a reason for increased difficulty in managing cyber risk today vs five years ago.

Nearly all organisations (99%) assess vendor risk.

47% of cybersecurity and cyber risk professionals report exhaustion (burnout).

90% of surveyed cybersecurity and cyber risk leaders find managing cyber risks harder today than five years ago.

The explosion of AI is cited by 39% of cybersecurity and cyber risk leaders as a reason for increased difficulty in managing cyber risks today vs five years ago.

1 in 5 organisations still admit their cyber practices are "immature".

Just 28% of organisations say they are "very effective" at communicating cyber risk to leadership.

Cybersecurity and cyber risk leaders at organizations without full threat visibility have a burnout rate of 63%.

Just 17% of organisations have tools to regularly map threats and contextualise them for full visibility.

Cybersecurity and cyber risk leaders at organizations with full threat visibility experience a significantly lower burnout rate of 44%.