Skip to main content

The State of Enterprise Cyber Crisis Readiness (report)

A Global Look at How Organizations Prepare – and Struggle – to Respond to Cyber Threats

Executive Summary

Despite widespread claims of cyber preparedness, pervasive business impacts indicate that most organizations aren’t battle-ready when it counts. This global study of 1,000 organizations across the US, UK, Europe, and the Asia-Pacific region reveals a disconnect between perceived readiness and actual performance in cyber crisis response. Our study reveals that cyber incident response plans are being implemented and regularly tested — but not holistically. In a real-world crisis, too many teams operate in silos.

  • 90% struggle with serious blockers to effective cyber response.
  • Less than 50% are conducting tabletops that include all the teams commonly involved in an actual crisis.
  • Even with plans and practice, 71% still experienced at least one high-impact cyber incident that disrupted critical business functions in the past year; 36% suffered multiple damaging incidents.

Most organizations believe they’re ready for a cyber crisis. Repeated business-stopping events say otherwise. Simply hiring more people isn’t the answer. To drive resilience, organizations need to fix gaps in cross-team communication and coordination.

Frontier AI in the Health Sector: Managing Supply Chain and Vendor Risk
Human Risk Management 90-Day Playbook