The report highlights that many organizations are not adequately prepared for cyberattacks, despite increased corporate security budgets. It reveals that larger budgets do not necessarily correlate with higher cybersecurity maturity. The analysis, based on data from over 500 organizations across 15 countries and 11 industries, shows that countries like Norway, Croatia, and Japan lead in cybersecurity maturity, while sectors such as healthcare and retail lag behind.

Surprisingly, small and medium-sized organizations scored higher in cybersecurity maturity than those with over 10,000 employees. This may be due to smaller organizations having a more manageable attack surface and medium-sized organizations prioritizing cybersecurity investments. In contrast, large organizations face challenges in defending their extensive attack surfaces.

The report found that 32% of organizations have weak password policies, and 23% have inadequate authentication mechanisms. These issues create opportunities for hackers to exploit vulnerabilities easily. Addressing these weaknesses is crucial for improving overall cybersecurity maturity.