17.6% of CISOs believe that manual processes are easier than using Compliance as Code.

42% of CISOs are challenged by data and system silos as a challenge in satisfying regulatory requirements.

More than 76% of chief information security officers (CISOs) at the World Economic Forum’s Annual Meeting on Cybersecurity in 2024 reported that fragmentation of regulations across jurisdictions greatly affects their organisations’ ability to maintain compliance.

84% of organizations say a lack of transparency in applying AI applications within business processes is causing regulatory compliance issues.

38.5% of CISOs said GRC tools are too expensive.

43.6% of CISOs cited control mapping as a challenge in implementing new or updated compliance frameworks.

96% of UK senior security professionals say DORA will significantly enhance overall resilience across the EU and the EU business ecosystem.

26.1% of CISOs cited the rate of regulatory change as a challenge in implementing new or updated compliance frameworks.

Almost one-third (31.1% of CISOs) believe that their company’s resistance to change is primarily driven by financial matters.

40.4% of CISOs are challenged by the lack of a centralized system as a challenge in satisfying regulatory requirements.

44.2% of CISOs consider security and compliance a business enabler.

76.1% of CISOs said integrations are most important when selecting tools/vendors to provide governance and continuous controls monitoring.

64% of CISOs reveal that the current threat and regulatory environment make them concerned they’re not doing enough.

21% of CISOs revealed they had been pressured not to report a compliance issue.

Of the organisations that measure the operational cost of managing compliance, 10.1% track IT costs.

Almost half of the CISOs who rated their compliance programs a 1 or 2 attributed their difficulties to a lack of personnel or resources.

Most organisations (57.9%) spend at least some of their budget on GRC tools to collect and maintain compliance evidence.

58% of UK CISOs report that regulations put enhanced pressure on their wellness.

30% of CISOs spend less than $100,000 annually on compliance.

230 million of the breached passwords met standard complexity requirements, including length, capitalisation, numbers and special characters.