Key Findings
38% of bank leaders believe their primary regulator was understaffed or otherwise underresourced.
36% of bank leaders cite overreliance on one individual or function as a common gap found in tabletop cybersecurity exercises.
35% of bank leaders cite internal communications as a common gap found in tabletop cybersecurity exercises.
84% of bank leaders are concerned about fraud and scams targeting their customers.
53% of bank leaders believe their bank could take more strategic risk.
79% of bank CEOs, board members, chief risk officers and senior executives are concerned about fraud.
54% of banks employ a chief risk officer.
77% of bank leaders are concerned about fraud and scams targeting their employees and organization.
37% of bank leaders report heightened attention to cybersecurity during regulatory exams, up from 30% in 2025.
79% of board chairs and independent directors say the board reviews and approves the bank’s cybersecurity strategy.
47% of directors say the board invited outside experts to speak about cybersecurity trends over the past 12 months.
89% of bank CEOs and technology executives say their bank conducted a tabletop exercise of its cybersecurity incident response plan in the prior 12 months.
20% of bank leaders believe their bank or its customers were impacted by fraud involving AI or deepfake media in the prior 18 months.
One-third of bank leaders say they do not understand agentic AI at all.
28% of bank leaders cite regulatory risk as a top concern, down from 55% a year earlier.