Accenture’s State of Cybersecurity Resilience 2025 report is based on a survey of 2,286 cybersecurity and technology executives from large organizations around the globe. It reveals that the rapid adoption of AI has dramatically accelerated the speed, scale, and sophistication of cyber threats, far outpacing current enterprise cyber defences. For example, more than three-quarters (77%) of organizations lack the essential data and AI security practices needed to protect critical business models, data pipelines, and cloud infrastructure.
Despite the rapid growth of AI enterprise adoption, only 22% of organizations have implemented clear policies and training for gen AI use. Furthermore, very few maintain a comprehensive inventory of AI systems, which is crucial for managing supply chain risks. Additionally, data protection remains inadequate, with only 25% of organizations fully leveraging encryption methods and access controls to protect sensitive information.
“The rapid advancement of gen AI represents a profound paradigm shift in cybersecurity, bringing unique challenges and opportunities. By designing AI systems with security at their core and continuously monitoring and updating them, organizations can stay ahead of the most critical threats,” said Daniel Kendzior, global data and AI security lead at Accenture. “Business resilience requires readiness to quickly respond to disruptive forces and confidence in your organization’s ability to act effectively.”
The research also reveals widespread cybersecurity immaturity across regions, highlighting a critical gap between ambition and readiness. Only 14% of North American and 11% of European organizations have mature postures. In Latin America, 77% lack basic strategies and capabilities, while 71% of Asia-Pacific organizations remain in the ‘Exposed Zone’, facing serious operational and financial risk.
The research identifies three distinct security maturity zones based on an organization’s cybersecurity strategy and technical capabilities.
The top group is termed the ‘Reinvention Ready Zone’ by Accenture and comprises only 10% of organizations. These have an adaptive, resilient security posture that continuously evolves to counter emerging threats.
The middle 27% in the ‘Progressing Zone’ show strength but struggle with defining strategic direction or implementing defences.
The most at-risk group, in the ‘Exposed Zone’, makes up two thirds (63%) of organizations, characterised by limited cyber readiness and a reactive posture to threats. These conditions are exacerbated by today’s complex AI environment and global risk factors.
Reinvention Ready companies, however, are 69% less likely to face advanced attacks and are 1.5 times more effective at blocking them. They also have 1.3 times greater visibility across IT and OT environments, have reduced technical debt by 8%, and see a 15% boost in customer trust, demonstrating how stronger cybersecurity practices drive both resilience and business value.
Four critical actions are necessary to reach the Reinvention Ready Zone, says Accenture. These are:
- Develop and deploy a fit-for-purpose security governance framework and operating model, accounting for the realities of an AI-disrupted world, to establish clear accountability and align AI security with regulatory and business objectives.
- Design a digital core to be generative AI secure from the outset by embedding security into AI development, deployment, and operational processes.
- Maintain resilient AI systems with secure foundations that proactively address emerging threats, enhance detection capabilities, enable AI-model testing, and improve response mechanisms.
- Reinvent cybersecurity with gen AI by leveraging it to automate security processes, strengthen cyber defences, and detect threats sooner.
Methodology
Accenture surveyed 2,286 executives — comprised of 80% chief information security officers and 20% chief information officers — from large organizations (revenues of more than US$1 billion) in 24 industries across 17 countries in North and South America, Europe, Asia-Pacific, the Middle East, and Africa. The survey was conducted online from the end of October to December 2024.
