Half (50%) of the respondents said DORA requirements have been integrated into their broader resilience programs.

45% of C-level executives express being ‘very confident’ in managing cyber risk, whereas only 19% of mid-level managers concur.

95% of C-level and senior executives believe their organization is effectively managing risk

26% of healthcare executives say they are likely to invest in cyber-resilience processes across the business.

Only 4% of organizations worldwide have achieved a 'Mature' level of cybersecurity readiness. This is a slight increase from last year's Index, in which 3% of organizations worldwide were designated as Mature.

Nearly half (43%) of executives within cyber resilient organizations report they are increasing boardroom engagement in resilience-related discussions.

53% of cyber resilient organizations are committing significant investment to advanced threat detection.

79% of cyber-resilient organizations say their adaptive approach to cybersecurity enables their company to take greater risks with innovation.

61% of cyber resilient leaders have allocated a cybersecurity budget to new initiatives from the beginning, compared to 46% overall.

37% of executives overall report increasing boardroom engagement in resilience-related discussions.

45% of executives say that cyber resilience is recognized as a whole company priority rather than simply a cybersecurity issue—an increase from 27% last year.

Organizations that prioritize data resilience can recover from ransomware attacks up to seven times faster.

Only 46% of larger and 37% of smaller middle market companies reported collaborating with external partners for coordinated resilience planning.

96% of UK senior security professionals say DORA will significantly enhance overall resilience across the EU and the EU business ecosystem.

38% of public-sector organisations report insufficient resilience, compared to 10% of medium-to-large private-sector organisations.

54% of large organisations identified supply chain challenges as the biggest barrier to achieving cyber resilience.

The proportion of large organisations reporting insufficient cyber resilience has nearly halved.

49% of public-sector organisations indicate they lack the necessary talent to meet their cybersecurity goals, which is a 33% increase from 2024.

Nearly 60% of organisations state that geopolitical tensions have affected their cybersecurity strategy.

4 out of 5 non-platform organisations say their security operations cannot effectively deal with the sheer quantity of threats and attacks.