40% of EMEA leaders name data used for AI or analytics as their top operational blind spot.

72.5% of EMEA organizations are actively deprioritizing data sovereignty in favor of accelerating AI.

The regional average agreement across EMEA that public policy should mandate open source principles is 77%, with France at 70% and Germany at 72%.

First-party fraud accounted for 51.7% of fraud in EMEA.

EMEA's fraud attack rate increased 27% year over year.

EMEA accounted for 57% of all Web DDoS attacks globally.

North America accounted for 40.7% of malicious bot transactions, followed by APAC (25%), EMEA (19.1%) and Central and Latin America (15.2%).

More than 3.2 million DDoS attacks in the first half of 2025 occurred in EMEA.

Only 20% of financial services organizations have yet to implement third-party risk oversight (a DORA requirement).

34% of financial services organizations cite third-party risk oversight as the most challenging DORA requirement to implement.

22% of financial services organizations believe the volume of digital regulation is becoming a barrier to innovation or competition.

94% of organizations are clear on the steps they need to take for DORA compliance.

40% of organizations call DORA a current "top digital resilience priority".

24% of financial services organizations have not identified a DORA implementation lead (a DORA requirement).

41% of senior IT decision makers at financial services report increased stress and pressure on IT and security teams due to DORA.

21% of financial services organizations have not ensured backup integrity and secure data recovery (a DORA requirement).

39% of senior IT decision makers at financial services reported DORA remains a central focus.

20% of financial services organizations have yet to secure the necessary budget to meet DORA requirements.

Half (50%) of the respondents said DORA requirements have been integrated into their broader resilience programs.

Over a third (more than 33.3%) of financial services organizations named third-party oversight the most challenging DORA requirement to implement.