Skip to main content

Spotlight on 
Tech Transformation & Cyber Risk 2025

A reality check in dynamic and uncertain times

Our latest Risk & Resilience survey¹ reveals a significant shift in cyber risk perception and perceived resilience to cyber security threats among global executives. 

For the first time since 2021², concern over cyber risk has risen, with 29% of global executives citing this risk as their greatest threat, up from 26% in 2024. But while awareness of cyber risk grows, paradoxically, executives feel more prepared[i] for evolving cyber threats, with perception of resilience rising from 75% in 2024 to 83% this year.

This contradiction underestimates today’s cyber and tech threat landscape, which is increasingly dynamic and unpredictable – as the recent high profile ransomware attacks on major retailers have made alarmingly clear. Failure to recognise this reality leaves businesses exposed, unprepared and increasingly vulnerable to today’s fast-evolving digital threats.

However, it is good to see that 79% of firms are looking to improve their cyber security with third party suppliers, and 37% are planning to invest in improved cyber security this year. This investment is needed, as organisations are facing a quadruple whammy of ‘whack-a-mole’ style risks that they must navigate.

“Cyber controls are not one and done, there needs to be continuous investment.”

Sydonie Williams, Head of International Cyber Risks

YouTube still image of Sydonie Williams

Building Resilience

A number of high profile retailers in the UK are dealing with significant cyber attacks, and other incidents have highlighted the systemic risks posed by third party supplier attacks - where a single event can cascade across ecosystems, impacting numerous entities. For some the impact can be contained and managed, for others, it creates major problems. Firms that employ a defence in depth security framework are usually better able to weather the storm and resume operations more quickly.

[i] ‘Very’ and ‘moderately’ prepared answers combined. 

[ii] ‘Not very well’ and ‘not at all’ prepared answers combined.

[1,2] Methodology