The World Economic Forum’s report titled “Global Cybersecurity Outlook 2025” discusses the complexities of the evolving cybersecurity landscape. It highlights increasing vulnerabilities driven by geopolitical tensions, emerging technologies, and growing cyber inequities. Smaller organisations are particularly at risk, with 35% admitting to inadequate preparedness, a significant increase since 2022. In contrast, 71% of cyber leaders believe that small organisations have reached a critical tipping point in security.

The report notes that 72% of organisations have faced heightened cyber risks over the past year, with generative AI being a major concern due to evolving threats like sophisticated ransomware and social engineering attacks. Supply chain vulnerabilities are also a significant issue, with 54% of organisations identifying them as the biggest barrier to cyber resilience.

Key trends include a complex regulatory environment requiring robust compliance strategies, heavy reliance on a limited number of third-party providers, and the associated risks that could lead to systemic failures. There is an increasing recognition of the need to upskill employees to fill millions of cybersecurity roles globally.

To improve organisational cybersecurity, the report advocates for a “security-first mindset,” collaborative approaches, and aligning investments with risk management strategies. Recommendations include reassessing cyber risk postures, understanding supply chain dependencies, and evaluating the impact of AI on cybersecurity initiatives. Addressing these challenges and fostering a proactive stance will be essential for enhancing cyber resilience across sectors and nations in the coming years.

The article was first published by EY.

Photo by Ed Hardie on Unsplash.