Axiad

46% of security and IT leaders at U.S. organizations with 500 or more employees cannot name a single individual responsible for leading their PQC migration

51% of security and IT leaders at U.S. organizations with 500 or more employees have never formally assessed whether their public-facing infrastructure supports post-quantum key exchange

63% of security and IT leaders at U.S. organizations with 500 or more employees are very confident that ownership of cryptographic assets is fully mapped

38% of senior security and IT leaders at U.S. enterprises with 500+ employees have experienced an identity-related security incident with measurable financial or operational impact.

64% of senior security and IT leaders at U.S. enterprises with 500+ employees say they have a complete, real-time picture of identity risk across their environment.

39% of senior security and IT leaders at U.S. enterprises with 500+ employees report narrowly avoiding an identity-related security incident but requiring significant unplanned remediation resources to contain it.

90% of CISOs and CIOs report a continuously updated cryptographic inventory

22% of security and IT leaders at U.S. organizations with 500 or more employees contradict their own PQC readiness claims within the same survey

74% of security and IT directors report a continuously updated cryptographic inventory

33% of security architects and PKI engineers report a continuously updated cryptographic inventory

33% of security and IT leaders at U.S. organizations with 500 or more employees report their organizations have taken no specific action on post-quantum cryptography

42% of security and IT leaders at U.S. organizations with 500 or more employees cite competing security priorities as a leading obstacle to PQC migration

36% of security and IT leaders at U.S. organizations with 500 or more employees cite budget constraints as a leading obstacle to PQC migration

27% of security and IT leaders at U.S. organizations with 500 or more employees report meeting every PQC readiness measure examined

Among the security and IT leaders who report meeting every PQC readiness measure, 48% still cite competing priorities as a major obstacle

75% of security and IT leaders at U.S. organizations with 500 or more employees report their organizations maintain a continuously updated inventory of cryptographic assets

Among the security and IT leaders who report meeting every PQC readiness measure, 40% cite budget as a major obstacle

67% of security and IT leaders at U.S. organizations with 500 or more employees consider post-quantum cryptography an active organizational priority

25% of security and IT leaders at U.S. organizations with 500 or more employees say their cryptographic inventory is stale, partial, or nonexistent

30% of security and IT leaders at U.S. organizations with 500 or more employees are waiting for clearer regulatory guidance before moving forward on post-quantum cryptography

34% of senior security and IT leaders at U.S. enterprises with 500+ employees say their existing tools surface issues but lack the context to prioritize by business impact.

94% of senior security and IT leaders at U.S. enterprises with 500+ employees say building a more complete, financially quantified view of their identity risk posture is a top or high priority in the next 12 months.

43% of senior security and IT leaders at U.S. enterprises with 500+ employees say they can assess the full blast radius of a compromised, high-privilege account within minutes.

41% of senior security and IT leaders at U.S. enterprises with 500+ employees have no defensible, methodology-backed dollar estimate of their identity risk exposure.

85% of senior security and IT leaders at U.S. enterprises with 500+ employees express concern that AI-accelerated vulnerability discovery is outpacing their organization's ability to prioritize and respond.