Cyber Resilience: By the Numbers

82% of organizations saw 11–50% of their data impacted from an attack.

The amount of data most organizations got back after paying a ransom was 51–75%.

44% of organizations suffered from multiple, damaging attacks.

55% of organizations still do not have a good understanding of Cyber Resiliency.

78% recognize Cyber Resiliency is a business problem, not just an IT issue.

75% think Cyber Resiliency is the new disaster recovery.

66% of organizations surveyed have been the victim of at least one cyberattack in the last 12 months, resulting in financial loss or disrupted business operations.

54% of organizations attacked paid a ransom.

92% of organizations still lost data after paying a ransom.

8% of organizations got all their data back after paying a ransom.

7% of organizations recovered in a day or less after an attack.

4–7 Days was the "normal" recovery time after a cyberattack.

Just 17% of organizations have recovery requirements for all business systems and applications needed for mission-critical services fully defined and documented.

75% of organizations saw impact to their data protection infrastructure and storage systems after a cyber attack.

78% of organizations suffered from the inability to access data or IT outages due to an attack (e.g., ransomware, malware, DDoS).

57% of organizations suffered multiple data outages from an attack.

Only 4% of organizations said they can ensure a clean, restorable copy of data for more than 90% of their mission-critical applications.

85% of organizations know Cyber Resiliency is a business priority.

85% believe Cyber Resiliency is transforming how IT and Security organizations approach cyber risk.

86% of organizations were down for multiple days after an attack.

83% of organizations do not have a tested, defined recovery plan.

1 in 4 organizations (25%) were down more than a week from a cyberattack.