Cybersecurity statistics / Third-Party Risk
| Publisher | Optro |
| Report | Human behavior: The AI risk surface GRC can't ignore |
| Published | 12 May 2026 |
| Topics | Third-Party Risk, AI Adoption |
Published by Optro in Human behavior: The AI risk surface GRC can't ignore, 12 May 2026. The figure is taken from the report as published; the full methodology is in the source.
12 sources answer what share of organisations have an ai governance policy in place. They report between 18% and 44%, with a median of 36.5%.
See all 12 sources| 48% of organisations continue working with suppliers despite known resilience or security concerns. Data Health Check 2026, 25/07/2026 |
| 43% of organisations that knowingly work with risky suppliers experienced a supplier-originated cyber incident, compared with 10% of organisations that did not knowingly work with risky suppliers. Data Health Check 2026, 25/07/2026 |
| Organisations that knowingly work with risky suppliers are more than four times as likely to experience a supplier-originated cyber incident. Data Health Check 2026, 25/07/2026 |
| 26% of businesses have suffered a cyber incident that originated in their supply chain in the last year. Data Health Check 2026, 25/07/2026 |
| 38% of restaurant chains say reliance on third-party vendors increases their cyber risk. VikingCloud, 12/07/2026 |
| 28% of restaurant chains had third-party platform data exposed in the past year. VikingCloud, 12/07/2026 |
Weekly cybersecurity statistics by email.