53% of US companies express confidence they could regain control if AI exposes admin credentials.

Only 32% of organizations globally are very confident they could regain control if AI exposes admin credentials.

12% of French companies express confidence they could regain control if AI exposes admin credentials.

90% of organizations say they can recover from a cyber incident within their recovery time objectives (RTOs).

53% of US IT and security professionals at companies with at least 1,000 employees are very confident they can quickly recover from an AI-driven ransomware attack.

A single SMB breach can exceed $4.91 million when downtime and recovery are included.

AI-first businesses take nearly seven months on average to fully recover from cybersecurity incidents, which is 80 days longer than non-AI-first businesses.

In 2025, 19% of CISOs indicated that recovery efforts from cyber incidents extended as long as two weeks.

In 2025, not a single Chief Information Security Officer (CISO) reported being able to recover from a cyber incident within a day.

In 2025, 98% of organizations reported spending between $1 and $5 million to recover from cyber incidents, with the average recovery cost per incident being $2.5 million.

72% of CISOs agreed that their role has evolved to include leading their organization’s ability to recover continuity following a cyberattack or security incident.

In 2025, 57% of CISOs reported that their organizations took more than 4.5 days on average for full remediation and recovery after a cyber incident.

29% of IT leaders believe that lower cyber liability insurance premiums are a key benefit a cyber incident recovery solution provides to contribute to better cyber resilience.

53% of IT leaders believe that regular testing and validation of cyber incident recovery plans is a key benefit a cyber incident recovery solution provides to contribute to better cyber resilience.

70% of organizations test their cyber incident recovery plans annually.

96% of IT leaders state their organizations are very likely or somewhat likely to invest in cyber incident recovery in the next 12 months.