Report by Swimlane

Cracks in the Foundation: Why Basic Security Still Fails

11 FINDINGSPublished Nov 12, 2025
View Original Report →

Key Findings

66% of organizations faced a security incident in the past year.

SwimlaneCracks in the Foundation: Why Basic Security Still Fails·Nov 12, 2025
Security incident

64% of organizations fail to continuously assess vendor and supplier security after onboarding.

SwimlaneCracks in the Foundation: Why Basic Security Still Fails·Nov 12, 2025
Vendor security assessmentSupplier security assessmentOnboarding

64% of organizations report that AI and automation have increased their focus on the basics of cyber hygiene.

SwimlaneCracks in the Foundation: Why Basic Security Still Fails·Nov 12, 2025
AIAutomationCyber hygiene

73% of organizations take longer than 24 hours to apply critical patches.

SwimlaneCracks in the Foundation: Why Basic Security Still Fails·Nov 12, 2025
PatchingCritical patches

41% of organizations rank expanding AI usage and expertise as the top improvement area.

SwimlaneCracks in the Foundation: Why Basic Security Still Fails·Nov 12, 2025
AI

67% of organizations audit user access privileges quarterly or less often.

SwimlaneCracks in the Foundation: Why Basic Security Still Fails·Nov 12, 2025
User access privilege

84% of organizations say AI and automation enhance cyber hygiene.

SwimlaneCracks in the Foundation: Why Basic Security Still Fails·Nov 12, 2025
AIAutomationCyber hygiene

25% of organizations take between 8 and 30 days to apply critical patches.

SwimlaneCracks in the Foundation: Why Basic Security Still Fails·Nov 12, 2025
PatchingCritical patches

92% of organizations that experienced a security incident in the past year believe stronger cyber hygiene could have prevented it.

SwimlaneCracks in the Foundation: Why Basic Security Still Fails·Nov 12, 2025
Security incidentCyber hygiene

15% of organizations self-identify as 'leading' in cyber hygiene maturity.

SwimlaneCracks in the Foundation: Why Basic Security Still Fails·Nov 12, 2025
Cyber hygieneMaturity

52% of organizations identify the human element, including employee training and awareness, as their greatest weakness.

SwimlaneCracks in the Foundation: Why Basic Security Still Fails·Nov 12, 2025
Human elementEmployee trainingEmployee awareness