53% of UK IT leaders in the tech sector say they've adopted AI detection.

89% of UK IT leaders agreed that well-managed email signatures directly contribute to professionalism and client confidence.

In the UK, concern about AI compromising security increased from 61% in 2024 to 81% in 2025 (a 20 percentage point increase).

The U.S. and U.K. together represent over 70% of ransomware attacks.

UK organisations are 11% less likely to have tested their recovery plans within the last month compared to other countries.

Only 36% of UK organisations strongly believe that they should prioritise the minimum viability approach.

UK organisations are 21% less likely to have a dedicated environment in which to recover compared to other countries.

93% of UK businesses have experienced a business-critical cyber incident.

57% of business-critical incidents in the UK occurred in the past 18 months.

Only 7% of the UK businesses surveyed reported never having experienced a "business-critical" incident, which is less than the 14% reported for the rest of the world.

52% of UK organisations stated that the biggest challenge to achieving Minimum Viability Company (MVC) status is the complexity of existing systems and applications.

65% of UK organisations have an inventory of business-critical systems and dependencies, which is ahead of the global average of 50%.

61% of UK organisations have created defined runbooks, roles, and processes for incident responses, which is ahead of the global average of 41%.

Almost a third (30%) of UK organisations cited difficulties separating 'core' systems from less business-critical, 'broader' operations as another primary barrier to achieving Minimum Viability Company (MVC) status.

47% of UK organisations cited the struggle to keep recovery plans in line with changing business needs as the biggest challenge to achieving Minimum Viability Company (MVC) status.

24% of UK organisations have a formal policy never to pay a ransom. This figure is double the figure from 2023

79% of U.K. IT and security decision-makers say growing U.S. cybersecurity instability has made them more cautious with U.S.-based vendors.

UK organisations are now more than three times more likely to recover from backups than pay the ransom.

59% of UK organisations have immutable backups.

17% of UK organisations hit by ransomware in the past year paid the ransom. This figure is down from 27% in 2024 and 44% in 2023.