Report by index Engines
Cyber Resilience: By the Numbers
Key Findings
1 in 4 organizations (25%) were down more than a week from a cyberattack.
83% of organizations do not have a tested, defined recovery plan.
66% of organizations surveyed have been the victim of at least one cyberattack in the last 12 months, resulting in financial loss or disrupted business operations.
The amount of data most organizations got back after paying a ransom was 51–75%.
44% of organizations suffered from multiple, damaging attacks.
82% of organizations saw 11–50% of their data impacted from an attack.
55% of organizations still do not have a good understanding of Cyber Resiliency.
75% think Cyber Resiliency is the new disaster recovery.
54% of organizations attacked paid a ransom.
92% of organizations still lost data after paying a ransom.
8% of organizations got all their data back after paying a ransom.
7% of organizations recovered in a day or less after an attack.
4–7 Days was the "normal" recovery time after a cyberattack.
75% of organizations saw impact to their data protection infrastructure and storage systems after a cyber attack.
78% recognize Cyber Resiliency is a business problem, not just an IT issue.
Just 17% of organizations have recovery requirements for all business systems and applications needed for mission-critical services fully defined and documented.
57% of organizations suffered multiple data outages from an attack.
78% of organizations suffered from the inability to access data or IT outages due to an attack (e.g., ransomware, malware, DDoS).
85% believe Cyber Resiliency is transforming how IT and Security organizations approach cyber risk.
86% of organizations were down for multiple days after an attack.
85% of organizations know Cyber Resiliency is a business priority.
Only 4% of organizations said they can ensure a clean, restorable copy of data for more than 90% of their mission-critical applications.