A new survey-based report from Semperis looks at The State of Enterprise Cyber Crisis Readiness. The survey of 1,000 organizations in the US, UK, Germany, France, Italy, Spain, Singapore, Australia, and New Zealand, found that 71% had experienced at least one high-impact cyber event that halted critical business functions last year.
In addition:
- 36% suffered multiple high-impact events.
- 96% of companies say they have a cyber crisis response plan.
- 90% activated their enterprise crisis response plan at least once in the past year — some more than 25 times.
- Only 10% report no blockers during incident response. Despite frequent testing, most organizations are not ‘battle-ready’ due to disjointed processes, poor coordination and tool sprawl.
The top five blockers to effective cyber response were:
- Cross-team communication gaps (48%)
- Out-of-date response plans (45%)
- Unclear roles and responsibilities (41%)
- Too many disparate tools (40%)
- Staffing shortages (ranked last globally at 39%)
There were regional differences apparent. Staffing shortages were listed as the biggest blocker in Italy and New Zealand. In the US, outdated response plans and cross-team communications gaps were ranked as the biggest blockers. In France and Germany, tool sprawl was the biggest blocker. Cross-team communications gaps was the top blocker in the UK, Australia, Singapore, and Spain.
IT/telecom industries experienced the most high-impact cyber events, followed by energy, travel/transportation, education and healthcare.
In today’s cyber threat landscape, the ability to respond swiftly and decisively is just as critical as prevention. Companies need a command centre for crisis management, ensuring organizations have the playbook, the training and the coordination needed to turn chaos into control.
Chris Inglis, US National Cyber Director and Semperis Strategic Advisor
Alongside publishing the State of Enterprise Cyber Crisis Readiness report, Semperis announced the launch of Ready1, a first-of-its-kind enterprise resilience platform designed to bring structure, speed and coordination to cyber crisis management.
Ready1 unifies stakeholders, coordinators and technical teams under one secure platform, ensuring seamless crisis response through preparation, collaboration and enterprise-wide communications. It provides:
- A secure command centre with live dashboards and playbook automation,
- Real-time coordination across teams and external partners,
- Integrated tools for communications, documentation and task tracking,
- Always-on readiness through tabletop testing, role-based team building and after-action reviews.
