A recent survey by PwC has surfaced alarming deficiencies in global cybersecurity practices, revealing that only 2% of organizations have achieved full cyber resilience across all evaluated areas. The findings from the 2025 Global Digital Trust Insights survey, which included insights from over 4,000 business and technology executives from diverse industries and countries, emphasize a critical vulnerability that could jeopardize the stability of many organizations.

The survey assessed twelve key resilience measures revolving around people, processes, and technology. Surprisingly, less than 42% of executives believe that their organizations have effectively implemented even one of these essential measures. Among these highlighted gaps, three stand out:

1. Resilience Team Formation: Only 34% of organizations reported having a resilience team established across the entire organization.

2. Cyber Recovery Playbook Development: Just 35% of respondents indicated that their organizations had created a playbook to address IT loss scenarios, a critical component for effective recovery.

3. Mapping Technology Dependencies: A mere 31% have successfully mapped their technology dependencies, potentially exposing them to risks tied to interconnected systems.

These gaps reflect a troubling reality, as organizations remain susceptible to cyber threats that could paralyze their operations. The statistics are a wake-up call; the overwhelming majority of businesses are not adequately prepared for the evolving threat landscape.

Leadership Involvement: A Missed Opportunity

The report also highlights a significant concern regarding the involvement of Chief Information Security Officers (CISOs) in crucial business discussions. Alarmingly, fewer than 50% of CISOs are actively engaged in strategic planning related to cyber investments, reporting to boards, or supervising technology deployments. This absence can lead to misaligned organizational strategies and compromised security measures.

Integrating cybersecurity into the broader business strategy necessitates that CISOs are present at the decision-making table. Their participation is vital not just for ensuring that security measures are adopted but also for aligning cybersecurity initiatives with business objectives, fostering a culture of security awareness throughout the organization.

Emerging Threats from New Technologies

Another evolving challenge highlighted in the survey is the integration of new technologies, particularly generative AI. Approximately 67% of security executives noted that the rise of AI has broadened their attack surface over the last year, underscoring the need for organizations to stay ahead of potential vulnerabilities.

This risk is compounded by the widespread adoption of cloud technologies and connected devices. Despite the heightened risk environment, organizations still report increased investments in new technologies. Notably, 78% of executives confirmed a rise in spending on generative AI, illustrating the ongoing tension between innovation and the necessity of robust security frameworks.

The Role of Regulations in Cybersecurity Enhancement

Cybersecurity regulations are cited as a key driver for investment in security measures, with 96% of executives indicating that compliance requirements have spurred improvements in their organizations’ cybersecurity practices. Furthermore, 78% acknowledge that these regulations have both prompted enhancements and posed challenges to their security posture.

Nonetheless, a significant confidence gap exists between CISOs/CSOs and CEOs regarding compliance with AI and resilience regulations. A 13-point discrepancy suggests a disconnect in perceptions of organizational readiness to meet regulatory requirements. Bridging this gap is crucial for ensuring coherent strategies and a unified approach toward cybersecurity within organizations.

The Path Forward for Organizations

The insights from the PwC report are clear: organizations must take urgent action to bolster their cybersecurity resilience. Here are several strategic steps organizations can consider:

1. Establish and Empower Resilience Teams: Organizations should prioritize the creation of dedicated resilience teams tasked with developing and implementing comprehensive resilience strategies. These teams should regularly assess risks and update recovery plans based on evolving threats.

2. Engage CISOs in Key Strategies: Ensuring that CISOs have a voice in high-level discussions and decision-making processes is crucial for aligning cybersecurity measures with overall business strategies. Their expertise is invaluable in integrating security into the fabric of organizational culture.

3. Invest in Technology While Weighing Risks: As organizations adopt new technologies, they must assess the associated risks and ensure that security measures are in place to mitigate vulnerabilities. This dual approach of embracing innovation while maintaining security safeguards is essential in today’s digital landscape.

4. Actively Monitor Regulatory Changes: Organizations should stay informed about changes in cybersecurity regulations and ensure compliance. Being proactive in adapting to regulatory demands can lead to significant improvements in overall security posture.

5. Promote Ongoing Awareness and Training: Investing in training programs to raise awareness among all employees about cybersecurity risks can foster a culture of vigilance and preparedness. Engaged employees are a crucial line of defense against potential threats.

In conclusion, the PwC report serves as a crucial reminder of the importance of cyber resilience in a world where threats continue to evolve. Organizations must not overlook their cybersecurity strategies, especially in light of increasing technological integration. By taking proactive measures and fostering a culture of security awareness, businesses can better safeguard themselves against the rising tide of cyber threats.