Hiscox Cyber Readiness Report 2026
This year’s report market a decade of cyber readiness research and
shows that businesses are starting to take back control as cyber risk
becomes a recurring cost of doing business – not an exceptional event.
Now in our tenth year of cyber readiness reports, the 2026 data draws on insights from 6,800 cyber security decision-makers across the UK, Europe and the USA, revealing that cyber attacks are no longer an occasional threat but a regular feature for businesses operating in the digital economy.
But the good news is that businesses are starting to take back control, investing on average $51,000 annually on cyber resilience measures designed to boost their defences.
Cyber Readiness Report 2026
Celebrating ten years of cyber readiness
Celebrating ten years of cyber readiness
Eddie Lamb, Global Head of Cyber at Hiscox:
"Over the past decade of our cyber readiness research, we’ve seen a clear shift in how businesses approach cyber risk – from reacting to incidents to building true resilience into their day-to-day operations.
That progress is visible in how organisations are investing more consistently in training, technology and specialist expertise, and how cyber security is now being embedded firmly into business strategy.
Resilience today is about being prepared, responding effectively, and continuing to operate in the face of disruption. That’s where we see the most meaningful progress and where continued focus will matter most."
What’s your cyber readiness score?
Review your company’s own cyber readiness. Is it novice, intermediate, or expert? How does your company compare to others across country, size of business, and industry sector? Our Hiscox Maturity Model is a free, interactive tool to help you review your company’s cyber maturity across six areas of cyber security within specific functions - people, process, or technology – using industry-accepted frameworks.
This year’s report market a decade of cyber readiness research and
shows that businesses are starting to take back control as cyber risk
becomes a recurring cost of doing business – not an exceptional event.
Latest report and accounts
Interim Statement 2026
