With the end of the year approaching, Resilience Forward is starting to look ahead to 2025 and how the resilience profession and the challenges it faces may develop. In the first of our look-ahead articles, Bridewell cyber security experts highlight six areas where organizations will need to adapt to remain resilient in 2025…
Resilience will be critical for tackling escalating cyber threats
“At a macro level, escalating tensions between global powers are likely to drive a surge in cyber attacks, with some nations adopting strategic, long-term tactics while others focus on disruption and financial gain through ransomware. Disinformation campaigns and hacktivism are on the rise, with AI-generated fake news emerging as a significant threat to social stability. Businesses must invest in resilience by upskilling internal teams, vetting suppliers, and strengthening partnerships with knowledgeable vendors to adapt.” Anthony Young, Founder & Chief Executive Officer.
AI will dominate both attacks and defence strategies
“AI has become that inescapable word which will continue to dominate in 2025. There are growing concerns about AI being used in breaches, such as creating bias in models, impersonation, and extortion. The response will be a case of fighting fire with fire, as AI enhances security strategies through pattern recognition and threat detection, but human expertise will remain essential.” Martin Riley, Chief Technology Officer.
Cyber security services will shift towards greater customisation
“We’re seeing a larger emphasis on commercial teams playing a key role in tailoring cyber services to meet customer needs and educating them on the economic impact of their decisions. Customers are moving away from long-term software licenses and towards flexible, technology-agnostic contracts. In 2025, businesses will increasingly seek solutions that align with immediate needs while supporting long-term recovery and resilience.” Benjamin Vaughan, Chief Commercial Officer
Cloud adoption will accelerate in operational technology environments “2025 will be the year where many organizations realise that their investments in network detection and response tools may not yield the expected results. Operational immaturity will remain a significant challenge, limiting the potential of cyber security investments. As cloud adoption accelerates, hybrid cloud solutions will offer greater control and redundancy, especially in OT environments.” Glenn Warwick, Head of Operational Technology
Regulatory changes will intensify the pressure on compliance
“Regulatory changes will be a major focus in 2025. The NIS2 Directive and DORA will impact EU companies and UK organizations providing services in the EU, while the energy sector faces mounting pressure to meet stringent standards by 2027. Delaying action is no longer viable, and businesses must prioritise early compliance efforts and invest in AI-driven defences.” Scott Hudson, Principal Consultant
Innovation will continue to accelerate at an increasing rate
“Whilst we don’t know what the next major innovation will be, we can be sure that the time to adoption will be faster than ever before. Generative AI tools scaled faster than any previous technology, and this rapid change will be a constant. Organizations need forward-facing teams that actively review and evaluate speculative advances, like quantum computing, for both risk and benefit.” Kieran B., Head of Security Engineering
The need for resilience and long-term value in cyber security has never been more pressing. With AI shaping both offensive and defensive strategies and regulatory demands intensifying, adaptability will be key in the year ahead. By fostering collaboration across commercial and technical teams and maintaining a strong focus on compliance, businesses can confidently navigate the evolving cyber threat landscape.
Anthony Young, Founder & Chief Executive Officer of Bridewell
