Cyber catalyst report: Guiding priorities in cyber investments
The report stems from our Marsh Global Cyber Buyers' Study, which was fielded from January to July 2025, gathering insights across eight regions from 2,200+ cyber risk leaders — including both cybersecurity and risk management specialists.
Cyber Risk Buyers
Regions
Countries
A broad spectrum of company sizes and industries responded
We started with a simple question: What keeps you, as a cyber risk leader, awake at night?
The leaders provided a wide range of answers:
- Is my organization prepared for a ransomware attack? A privacy breach? Any of the dozens of other ever changing cyber threats?
- How should I direct my organization’s cybersecurity investments?
- Is our confidence level in our cyber defenses justified?
- Does the decision-making structure for all things cybersecurity make sense?
And more.
Cybersecurity requires enterprise-wide engagement and collaboration, and we hope the insights contained within this report reduce the complexity when making difficult decisions.
The study follows similar surveys we conducted in 2019 and 2021, and combines quantitative and qualitative research, offering a snapshot of rapidly evolving trends in cyber risk management. By exploring both current pain points and future investment strategies, the report can provide valuable guidance as you look to enhance your cyber risk management strategy and resilience.
While the survey was global in scope, regional responses varied considerably, particularly around confidence levels and plans for cyber investments. This report highlights a few of those differences; we’ll bring you additional regional analysis in the coming months.
Finally, we’d like to thank all those who participated.