弥合网络韧性差距：高管层行动指南

Summary of PwC 2025 Global Digital Trust Insights Report

Introduction
This report analyzes findings from the 2025 Global Digital Trust Insights survey, highlighting the challenges and gaps in achieving cyber resilience across organizations. Despite heightened concerns about cyber risks, significant implementation gaps persist, necessitating strategic action from the C-suite to bridge these divides and enhance organizational security.

Key Findings

• Low Cyber Resilience Implementation: Only 2% of executives report full implementation of cyber resilience actions across all surveyed areas, leaving companies vulnerable to evolving threats.
• Preparedness Gaps: Organizations rank cloud-related risks, third-party breaches, and hack-and-leak operations as their most concerning threats, yet they feel least prepared to address them.
• Limited CISO Involvement: Under 50% of CISOs are involved to a large extent in strategic planning, board reporting, and tech deployments, creating misalignment in security strategies.
• Confidence Gap in Compliance: CISOs report lower confidence in regulatory compliance with AI, resilience, and critical infrastructure regulations compared to CEOs, hindering effective governance.
• Inadequate Risk Quantification: Only 15% of organizations measure the financial impact of cyber risks significantly, limiting informed decision-making and resource allocation.
• Emerging Technologies: GenAI adoption expands the attack surface; while 78% of executives increased GenAI investment, challenges in integration, governance, and risk management remain.
• Regulatory Drivers: Cyber regulations drive investment and improve security postures, but a confidence gap between executives and CISOs impedes full compliance readiness.
• Investment Priorities: Cyber budgets are expected to grow in 77% of organizations, with a focus on data protection, cloud security, and resilience, but strategic alignment is often lacking.

Recommendations

• C-Suite Collaboration: Enhance cross-functional coordination to embed cybersecurity into strategic business decisions and prioritize high-risk areas.
• CISO Empowerment: Increase CISO involvement in strategic planning and reporting by providing resources and support to bridge confidence gaps.
• Risk Quantification and Compliance: Implement data-driven cyber risk assessments and leverage regulations as a catalyst for resilience, addressing data quality issues.
• Emerging Tech Management: Invest responsibly in technologies like GenAI and quantum-resistant solutions, ensuring governance and risk mitigation.
• Proactive Strategies: Foster an agile, security-aware culture, focusing on threat anticipation, incident response, and stakeholder trust.

Conclusion
Addressing these gaps through coordinated C-suite action, strategic investments, and robust CISO leadership can significantly strengthen cyber resilience, enabling organizations to navigate the evolving threat landscape and build enduring trust.