CISO confusion about cyber insurance policy coverage for supply-chain attacks decreased from 58% in 2024 to 43% in 2025.

50% of industrial organizations claim that supply chain threats and cybercriminal activity are their top security concern.

Only 26% of organizations incorporate incident response into their supply chain cybersecurity programs.

Nearly 40% of respondents identified data overload and the inability to prioritize issues and threats as their biggest supply chain cybersecurity challenge

79% of organizations state that less than half of their nth-party supply chain is currently covered by cybersecurity programs.

88% of cybersecurity leaders are concerned about supply chain cyber risks.

More than 70% of organizations reported experiencing at least one material third-party cybersecurity incident in the past year.

5% of organizations suffered ten or more third-party cybersecurity incidents.

Fewer than half of organizations monitor cybersecurity across even 50% of their nth-party supply chains.

84% said that supply chain vulnerabilities were the most significant threat to their enterprise applications.

Open-source risks and cloud misconfigurations followed supply chain vulnerabilities closely at 73%.

Supply chain-driven cyber claims were up 43%.

98% of respondents integrated AI into their supply chains in Q1

23% of respondents named cybersecurity their top supply chain issue.

Between September 15, 2024 and February 14, 2025, there was a 11.1% incease in phishing emails sent from compromised email addresses within the supply chain.

35% of financial services professionals identified political instability as a challenge to supply chain assessment.

26% of financial services professionals identified geopolitical risk as a challenge to supply chain assessment.

Among financial services professionals who were less than "very confident" in their program's ability to assess their supply chains for threats, more than half (56%) of global respondents identified cybercrime as the biggest challenge to their programs in 2025.

One-third of the U.S. supply chain relies on software or services from companies formally designated by the Department of Defense as "Chinese Military Companies".

Two-thirds of the U.S. supply chain depends on companies with at least expected ties to Chinese state-linked entities.