Skip to main content
Arrow left Back to Main Menu
United Kingdom USA Asia Pacific Canada (English) Canada (French) Europe France Germany Spain Latin America
  1. Arrow left Parent Page
  2. Arrow left Parent Page
  3. Arrow left Parent Page

Executive Summary

Our latest Risk & Resilience survey¹ reveals a significant shift in cyber risk perception and perceived resilience to cyber security threats among global executives.

For the first time since 2021², concern over cyber risk has risen, with 29% of global executives citing this risk as their greatest threat, up from 26% in 2024. But while awareness of cyber risk grows, paradoxically, executives feel more prepared[i] for evolving cyber threats, with perception of resilience rising from 75% in 2024 to 83% this year.

This contradiction underestimates today’s cyber and tech threat landscape, which is increasingly dynamic and unpredictable – as the recent high profile ransomware attacks on major retailers have made alarmingly clear. Failure to recognise this reality leaves businesses exposed, unprepared and increasingly vulnerable to today’s fast-evolving digital threats.

However, it is good to see that 79% of firms are looking to improve their cyber security with third party suppliers, and 37% are planning to invest in improved cyber security this year.

Whack-a-mole range of risks

Investment in proactive cyber risk management is needed, as organisations are facing a quadruple whammy of ‘whack-a-mole’ style risks that they must navigate, including:

  • Cyber warfare: with the global geopolitical landscape becoming increasingly volatile, nation state cyber attacks are increasingly used as a hybrid warfare tactic to create disruption, boost financial resources, and destabilise economies, making the cyber battlefield more complex and unpredictable.
  • Third party cyber risk: the interconnected nature of modern business ecosystems means that vulnerabilities in third-party supplier systems can serve as easy entry points for cyber attackers. The rise of AI further amplifies this risk by enhancing attackers’ ability to identify and exploit these weaknesses more efficiently.
  • Ransomware attacks: cyber criminals are using AI to enhance the speed, scope, and success of their ransomware attacks. These threat actors are purely motivated by money, and they are relentless, constantly refining their tactics to exploit system vulnerabilities and get around known cyber security solutions.
  • Hacktivism: activists or politically motivated groups are using cyber attacks to promote their agendas and disrupt target companies. Not motivated by financial gain, hacktivists often maintain a long-term presence within their targets’ systems, posing a persistent threat to firms that are caught in the crosshairs of polarised views.

Beyond cyber risk, the transformative potential of AI to streamline processes and boost efficiency is immense. Businesses that fail to embrace the opportunities of AI risk being left behind. At the same time, there are growing concerns about intellectual property (IP) and data privacy risks and new regulations, resulting in an increasingly complex environment for businesses to navigate. 

In today’s volatile and evolving risk landscape, firms must stay ahead of cyber and data security threats by leveraging all available defence tools, conducting thorough and proactive cyber security risk assessments, and developing robust cyber risk management frameworks and strategies.

[1,2] - Methodology

Contact us

FOR BROKERS

For Customers