97% of surveyed executives at middle market organisations reported feeling confident in their current security measures.

90% of organisations are concerned that poor collaboration between GRC and security teams is undermining audit preparation.

Nearly a quarter (23%) of UK consumers say they do not know if real-time payment processes include enough security checks.

51% of IT leaders say employees don’t take security seriously.

Less than half of the respondents (44.1% of CISOs) described the relationship between compliance and security as completely synchronized.

Only 11% of AI-powered APIs implemented robust security measures, such as bearer tokens with expiration times.

Almost all (94.2% of CISOs) believe that continuous controls monitoring will improve both compliance and security.

Over 50% of exploits in CISA’s Known Exploited Vulnerabilities (KEV) report were API-related in 2024, up from 20% in 2023.

18.9% of API-related exploits involved legacy APIs, including AJAX backends and URL parameter-based systems.

98.9% of AI vulnerabilities are API related.

API-related data breaches tripled in 2024.

Of the organisations that measure the operational cost of managing compliance, 14.5% track compliance expenses.

Of the organisations that measure the operational cost of managing compliance, more than three quarters (75.4%) track all costs.

More than a third (37.8% of CISOs) said their relationship between compliance and security is in a phase of simple negotiations.

Two-thirds (66.3% of all CISOs) surveyed said that their organisation does not measure the operational cost of managing compliance.

57% of AI-powered APIs were externally accessible.

Almost one in ten (9.6% of CISOs) said their relationship between compliance and security is in a period of complex negotiations while 8.5% said their relationship is out of sync.

89% of AI-powered APIs relied on insecure authentication mechanisms, like static keys.