Only 29% of organizations conduct continuous simulation testing.

99% of organizations have formal incident response plans.

86% of private healthcare security decision makers report legal and communications challenges when responding to a cyber attack.

69% of organizations say their recovery time objectives (RTOs) are fully aligned with business continuity goals.

89% of senior cybersecurity decision makers report limited executive or board involvement in incident response readiness and decision making.

Among organizations hit by ransomware where operations or data were affected, only 28% fully recovered all affected data.

73% of senior cybersecurity decision makers say their organization would not be fully ready to execute under pressure if a significant cybersecurity attack occurred tomorrow.

25% of organisations across surveyed markets say their responses to digital disruption largely go to plan

75% of senior cybersecurity decision makers report legal and communications issues slow down decision making during incident response.

90% of organizations say they can recover from a cyber incident within their recovery time objectives (RTOs).

32% of IT decision-makers conduct monthly testing of disaster recovery plans.

On average, organizations recover 72% of affected data following a ransomware attack.

75% of large U.S. companies say Harvest Now, Decrypt Later (HNDL) attacks must be addressed most urgently.

71% of respondents expect negative business impact from attacks via Slack, Teams, Zoom, and similar platforms in 2026.

Only 40% of respondents have specific strategies to counter AI-driven attacks.

Smaller organizations are twice as likely to report insufficient resilience compared to large firms.

65% of large companies cited third-party and supply chain risks as their greatest cyber resilience barrier in 2026, up from 54% in 2025.

Only 29% of IT leaders expressed very high confidence in their ability to recover critical data after a zero-day exploit, while 59% were only somewhat confident.

54% of IT leaders plan for a moderate or significant increase in their budget for data protection and resilience in 2026.

Resilience Scores among organizations have remained statistically flat since 2023, with an average decline of 3%.