Small Large40% 30% 20% 10% 2022 20250%35% 7%13% 5%Smaller organizations are struggling to ensure cyber resilience, while larger organizations show steady progressMy organization's cyber resilience is insufﬁcient71% of cyber leaders at the Annual Meeting on Cybersecurity 2024 believe that small organizations have already reached a critical tipping point where they can no longer adequately secure themselves against the growing complexity of cyber risks71% Not conﬁdent Neutral Conﬁdent Very conﬁdentLatin America Africa Asia Middle East Europe North America OceaniaHow conﬁdent are you that the country in which your organization is based is well prepared to respond to major cyber incidents targeting critical infrastructure? -70% -60% -50% -40% -30% -20% -10% 0% 10% 20% 30% 40% 50% 60% 70% 80%42% 36% 20% 21% 15% 15%36% 37% 48% 17% 25% 25%13%36%14% 4% 40% 27% 40% 7% 35% 15% 50%27% 31%9% 9%This disparity in cyber resilience is further highlighted by regional differences in preparedness: while only 15% of respondents in Europe and North America lack confidence in their country’s ability to respond to major cyber incidents targeting critical infrastructure, this proportion rises to 36% in Africa and 42% in Latin America. The public sector is disproportionately affected, with 38% of respondents reporting insufficient resilience, compared to just 10% of medium-to-large private-sector organizations. This inequity extends to the cyber workforce, with 49% of public-sector organizations indicating they lack the necessary talent to meet their cybersecurity goals – an increase of 33% from 2024. The Global Cybersecurity Outlook 2025 report includes a deeper analysis of the most important drivers of complexity and provides valuable insights into the most pressing cyber challenges in the year ahead and their potential implications for executives. Organizations reporting insufficient cyber resilience Regional differences in cyber resilienceFIGURE B FIGURE C Global Cybersecurity Outlook 2025 5