On May 7, 2025, Cisco Systems Inc. (NASDAQ: CSCO) released its much-anticipated 2025 Cybersecurity Readiness Index, highlighting significant gaps in global cybersecurity preparedness amid the rising complexities introduced by artificial intelligence (AI) and hyperconnectivity. The report paints a concerning picture: only 4% of organizations worldwide have achieved the 'Mature' level of cybersecurity readiness necessary to withstand the evolving threat landscape.

1. A Minor Improvement Amidst Alarming Trends

While the figure represents a slight increase from last year's 3%, it underscores the persistent vulnerability that organizations face in an age where cyber threats are more sophisticated than ever. Jeetu Patel, Cisco's Chief Product Officer, emphasized the urgency of the situation: "As AI transforms the enterprise, we are dealing with an entirely new class of risks at unprecedented scale - putting even more pressure on our infrastructure and those who defend it."

The Impact of AI on Cybersecurity

AI is both a tool and a threat in today's cybersecurity environment. The study reveals that nearly 90% of organizations (86%) encountered AI-related security incidents over the past year. Alarmingly, only 49% of respondents expressed confidence that their employees fully understand AI-related threats, indicating a significant awareness gap that leaves organizations critically exposed to potential attacks.

2. Current Cyber Threat Landscape

The report highlights that almost half of the organizations surveyed (49%) experienced cyberattacks in the past year. Respondents identified external threats—such as malicious actors and state-affiliated groups—as more significant than internal threats, with 58% of participants citing this concern. This perception points to the pressing need for organizations to streamline their defense strategies against external attacks.

Key Findings from the 2025 Cybersecurity Readiness Index

Cisco's Cybersecurity Readiness Index evaluates organizational readiness across five critical pillars: Identity Intelligence, Network Resilience, Machine Trustworthiness, Cloud Reinforcement, and AI Fortification. The Index is based on a double-blind survey of 8,000 security and business leaders across 30 global markets, providing a comprehensive overview of the cybersecurity landscape.

Alarming Statistics

Anticipated Disruptions: A staggering 71% of respondents expect business disruptions from cyber incidents within the next 12 to 24 months.

AI Utilization: The report indicates that 89% of organizations employ AI for threat understanding, 85% for threat detection, and 70% for response and recovery, highlighting AI's essential role in bolstering cybersecurity measures.

GenAI Deployment Risks: Over half of employees (51%) are using approved third-party GenAI tools, yet 22% have unrestricted access to public GenAI, with 60% of IT teams unaware of these interactions—signifying major oversight challenges.

Shadow AI Risks: Sixty percent of organizations lack confidence in detecting unregulated AI deployments, posing substantial cybersecurity and data privacy risks.

Vulnerabilities from Unmanaged Devices: With the rise of hybrid work models, 84% of organizations face increased security risks as employees access networks from unmanaged devices, further exacerbated by unapproved GenAI tools.

Investment in Cybersecurity: Although 96% of organizations plan to enhance their IT infrastructure, only 45% allocate more than 10% of their IT budget to cybersecurity—an 8% decrease year-over-year, signaling a critical need for re-evaluation of investment priorities.

Complex Security Postures: More than 77% of organizations report that complex security infrastructures, often consisting of over ten point security solutions, hinder their ability to respond effectively to threats.

Talent Shortage: A staggering 86% of respondents identified the shortage of skilled cybersecurity professionals as a major hurdle, with many organizations reporting over ten open positions.

3. A Call to Action

The findings from Cisco's 2025 Cybersecurity Readiness Index reveal an urgent need for organizations to invest in AI-driven solutions, simplify security infrastructures, and enhance awareness of AI-related threats. Patel's remarks serve as a clarion call: "Organizations must rethink their strategies now or risk becoming irrelevant in the AI era."

As the cybersecurity landscape continues to evolve, companies must prioritize robust security measures, focusing on AI for threat detection, response, and recovery while addressing talent shortages and risks from unmanaged devices and shadow AI.

Conclusion

Cisco's latest report underscores the critical state of cybersecurity readiness worldwide. With AI reshaping the threat landscape, organizations are urged to take immediate and decisive action to fortify their defenses and protect against increasingly sophisticated cyber threats. The time to act is now—before the cost of inaction becomes too great.

Original press release