VendorsKroll
Kroll
Cybersecurity reports and statistics published by Kroll
8 categories3 reports
Research Reports
Reports and publications from Kroll
Recent Statistics & Reports
51% of organizations cite differing risk tolerance as the leading cause of gaps in threat prioritization.
5/27/2026•
Risk ToleranceThreat Prioritization
80% of organizations increased cybersecurity budgets in 2026.
5/27/2026•
Budget
94% of organizations view cybersecurity as a primary business risk.
5/27/2026•
CybersecurityBusiness Risk
59% of organizations are increasing spending on cloud and third-party security.
5/27/2026•
Cloud SecurityThird-Party SecurityBudget
39% of organizations experience phishing attacks.
5/27/2026•
Phishing
43% of organizations report limited cyber literacy among executives.
5/27/2026•
Executive Cyber Literacy
Organizations face an average annual recovery cost and downtime of $2.2 million from cyber incidents.
5/27/2026•
Incident Recovery CostDowntime Cost
Only 10% of organizations have achieved very high cyber maturity.
5/27/2026•
Cyber MaturityRisk Management
55% of organizations are cutting or not increasing investment in red and purple teaming.
5/27/2026•
Security TestingProactive DefenseBudget
3% of organizations update incident response plans only after a cyber incident.
5/27/2026•
Incident Response PlanOperational Readiness
52% of organizations are cutting or not increasing investment in identity access management controls and zero-trust architecture.
5/27/2026•
BudgetInvestmentIdentity Access Management Controls
Organizations with higher cyber maturity experience 50% less financial impact per dollar of revenue when cyber incidents occur.
5/27/2026•
Cyber MaturityFinancial Impact
36% of organizations acknowledge gaps in how threats are prioritized.
5/27/2026•
Threat PrioritizationRisk ManagementThreat Prioritization Gaps
72% of organizations believe they can respond to an incident within 1–24 hours.
5/27/2026•
Incident ResponseOperational Readiness
72% of organizations report frequent misalignment between cybersecurity efforts and broader business priorities.
5/27/2026•
CybersecurityBusiness Priorities
99% of organizations have an incident response plan.
5/27/2026•
Incident Response Plan
28% of organizations experience business email compromise.
5/27/2026•
Business Email Compromise
48% of businesses say the CEO now makes the final decision on cyber budgets.
5/27/2026•
Budget
Approximately 90% of organisations report some degree of automation across business activities, with IT and cybersecurity functions becoming highly automated and digitised.
6/12/2025•
Automation
The most common cybersecurity threats reported include malware (44%) and AI-powered exploits (28%).
6/12/2025•
Cybersecurity threatsMalwareAI-powered exploits
Showing 1-20 of 44 results