85% of risk leaders globally reported having a business continuity and resilience plan in place to maintain operations during a major IT outage or cyber incident at one of their business-critical service providers.

68% of risk leaders foresee data privacy and security issues as the biggest risks from deploying agentic AI.

38% of risk leaders express concern over unintended actions from runaway processes, such as unauthorized transactions or incorrect pricing changes, as a risk from deploying agentic AI

15% of risk leaders are unaware if their organization is considering incorporating agentic AI into its operations or products.

30% of risk leaders claimed that third-party and nth-party risks are not having an impact or are only having a minimal impact on their business in 2024.

In 2025, 40% of companies reported that they mostly or only use spreadsheets to manage risk, a decrease from 53% in 2024, indicating a significant shift towards software use in risk management.

Thirty-nine percent of companies are not conducting worst-case scenario simulations, highlighting a critical gap in risk management practices that needs to be addressed.

75% of companies globally report not having a dedicated plan to specifically address generative AI risks, including deepfakes and AI-driven fraud attacks in 2025.

Only 12% of companies globally feel very prepared to assess, manage, and recover from AI and AI governance risks in 2025, according to a recent study.

32% of companies globally have formally trained or briefed the entire company on risks related to generative AI in 2025, up from 19% in 2024 and 17% in 2023.

Cyber risk incidents are reported as rising 22 percent in 2025.

Risk management ranks cyber attack or breach as the #1 current risk for global organizations.

The C-Suite ranks cyber attack or breach as the #1 current risk for global organizations.

HR ranks cyber attack or breach as the #3 current risk (after increasing competition and economic slowdown or slow recovery) for global organizations.

Finance ranks cyber attack or breach as the #2 current risk (after economic slowdown or slow recovery) for global organizations.

How cyber attack or breach ranked as current risk over the recent years: 2025 - #1, 2023 - #1, 2021 - #1, 2019 - #6, 2017 - #5, 2015 - #9.

AI ranks at #29 overall in current risks for global organizations.

Cyber attack or breach remains the top concern globally across current and future risks (no change from 2023) for global organizations.

More than three-quarters of bank CEOs, senior executives and directors named cybersecurity as a top risk for their institution.

69% of bank CEOs, senior executives and directors said fraud was a top risk for their institution.