Hack the Box

74% of Chief Information Security Officers (CISOs) reported that their organisations are increasing annual budgets for crisis simulation exercises in 2025.

73% of CISOs identified practical crisis simulations and incident response exercises involving both technical and non-technical teams as their top business priority for 2025.

19% of CISOs are concerned about their organisation's ability to handle a cyber crisis because of a lack of realistic, stress-tested crisis simulations.

16% of 2025 security budgets are being reallocated to simulation exercises.

77% of CISOs stated they would allocate greater budgets for cyber crisis simulations if the exercises were more realistic and actionable.

20% of CISOs are concerned about their organisation's ability to handle a cyber crisis because of the lack of incident response planning.

31% of CISOs are concerned about their organisation's ability to handle a cyber crisis because of the rising volume of cyber incidents.