The Cyber Resilience Compass 2025

Images: Getty Images Disclaimer This document is published by the World Economic Forum in collaboration with the Global Cyber Security Capacity Centre (GCSCC), University of Oxford, as a contribution to a project, insight area or interaction. The findings, interpretations and conclusions expressed herein are the result of a collaborative process facilitated and endorsed by the World Economic Forum but whose results do not necessarily represent the views of the World Economic Forum, nor the entirety of its Members, Partners or other stakeholders. © 2025 World Economic Forum. All rights reserved. No part of this publication may be reproduced or transmitted in any form or by any means, including photocopying and recording, or by any information storage and retrieval system.Contents Foreword Executive summary 1. Unpacking cyber resilience 2. The Cyber Resilience Compass 3. Learnings from front-line practice 3.1 Leadership 3.2 Governance, risk and compliance 3.3 People and culture 3.4 Business processes 3.5 Technical systems 3.6 Crisis management 3.7 Ecosystem engagement Conclusion and next steps Methodology Contributors Acknowledgements3 4 5 7 8 8 10 12 14 16 18 20 22 22 23 23 The Cyber Resilience Compass: Journeys Towards Resilience 2