Report by Cisco

2025 Cisco Cybersecurity Readiness Index

19 FINDINGSPublished May 7, 2025
View Original Report →

Key Findings

71% of respondents anticipate business disruptions from cyber incidents within the next 12 to 24 months.

Security incident

96% of organizations plan to upgrade their IT infrastructure.

IT infrastructure

86% of organizations have experienced AI-related security incidents in the last year.

AISecurity incident

Only 45% allocate more than 10% of their IT budget to cybersecurity. This allocation is down 8% year-over-year.

Budget

Only 4% of organizations worldwide have achieved a 'Mature' level of cybersecurity readiness. This is a slight increase from last year's Index, in which 3% of organizations worldwide were designated as Mature.

MaturityResilience

84% of organizations face increased security risks as employees access networks from unmanaged devices within hybrid work models.

VisibilityHybrid work

Over 77% of organizations report that their complex security infrastructures are impeding their ability to respond swiftly and effectively to threats. These infrastructures are often dominated by the deployment of more than ten point security solutions

IT infrastructure

Only 49% of respondents are confident their employees fully understand AI related threats.

AISecurity awareness

60% of organizations lack confidence in detecting unregulated AI deployments (shadow AI).

AIGen AIShadow AI

70% of organizations use AI for response and recovery.

AIResponseRecovery

89% of organizations use AI to understand threats better.

AI

58% of respondents view external threats (like malicious actors and state-affiliated groups) as more significant than internal threats (42%).

Security incidentCyber attack

85% of organizations use AI for threat detection.

AIThreat detection

51% of employees are using approved third-party GenAI tools.

AIGen AI

86% of organizations continue to face the challenge of a shortage of skilled cybersecurity professionals. More than half of these organizations report having more than ten positions to fill.

TalentSkills shortage

Only 48% believe their teams fully grasp how malicious actors are using AI to execute sophisticated attacks.

AI

Nearly half of organizations (49%) suffered cyberattacks in the last year.

Security incident

22% of employees have unrestricted access to public GenAI.

AIGen AI

60% of IT teams are unaware of employee interactions with GenAI.

AIGen AIVisibility