The rise of AI is leading to more advanced cyber threats, which are growing faster than companies' defenses. More than three-quarters (77%) of organizations lack the essential basic measures to adequately secure their data, AI models, and cloud systems, concludes the 'State of Cybersecurity Resilience 2025' report. The survey was conducted among 2,286 executives in cybersecurity and technology from large organizations worldwide.
"Due to increasing geopolitical tensions, economic uncertainty, and advanced AI attacks, organizations are more exposed to cyber risks than ever before. We also see the numbers and complexity of attacks increasing in the Netherlands," says Rob Knigge, Country Managing Director of Accenture Netherlands. "By prioritizing cybersecurity, companies can not only mitigate risks but also enhance customer trust and leverage this as a strategic advantage."
AI is growing, security is lagging
Although more and more companies are deploying AI, only 22% have proper policies and training for the use of generative AI. Only a small portion keeps track of which AI systems they use, which is important for mitigating risks in the supply chain. Data protection is also lagging: only 1 in 4 organizations uses standard encryption and access control to protect sensitive information.
"The rise of generative AI fundamentally changes the landscape for cybersecurity. It brings new risks, but also opportunities to better arm ourselves," says Michael Teichmann, Cyber Protection lead Accenture EMEA. "A major challenge globally, and also in the Netherlands, is the talent shortage. No less than 83% see this as a significant barrier to achieving the desired maturity level."
3 levels of maturity in cybersecurity:
The research also reveals that only 11% of European organizations have a mature attitude towards cybersecurity. It identifies three different maturity zones:
- The top group is in the so-called 'Reinvention Ready Zone', consisting of only 10% of organizations - has flexible security that continuously adapts to new threats.
- The middle 27% in the 'Progressing Zone' shows strength but struggles with determining strategic direction or implementing defenses.
- The most at-risk group is in the 'Exposed Zone'. 63% of these organizations are not well-prepared for cyber threats and primarily react after the fact. The rapid developments in AI and global risks only exacerbate this problem.
However, companies in the top group have a 69% lower chance of advanced attacks and are 1.5 times more effective at blocking them. They have 1.3 times more visibility into their IT and OT environments, 8% less technical debt, and 15% more customer trust. This shows that better cybersecurity not only ensures more safety but also creates more business value.
Crucial actions for enhanced cyber defense
Four crucial actions needed to reach the "Reinvention Ready Zone" are:
- Ensure a clear plan and approach for the safe use of AI, with clear agreements on who is responsible for what – aligned with legislation and business goals
- Design a digital core so that generative AI is secure from the start by incorporating security as an integral part of the design, development, and use, ensuring the foundation is solid.
- Ensure that AI systems remain strong and secure by properly securing them, detecting threats early, regularly testing, and being able to respond quickly if something goes wrong.
- Use generative AI to make cybersecurity smarter: automate tasks, improve defenses, and detect threats faster.
You can explore the State of Cybersecurity Resilience 2025 report in Accenture Foresight, Accenture's thought leadership app, which provides a personalized feed of all our latest reports, case studies, blogs, interactive data charts, podcasts, and more. Download the app at http://www.accenture.com/foresight.
Methodology
Accenture Research surveyed 2,286 executives, consisting of 80% chief information security officers and 20% chief information officers, from large organizations (revenue of >$1 billion) across 24 sectors in 17 countries in North and South America, Europe, Asia-Pacific, the Middle East, and Africa. The survey was conducted online from late October to December 2024. Read here the full report for more information on the methodology, including the development of the Security Posture Maturity and defining Security Zones
