Cyber risk dominates
31% selected cyber risk – data breaches, criminal threats and outages – as their top concern, up from 29% in 2025.
-
For brokers
1. Cyber risk is systemic - firms are underestimating the damage a ransomware attack or supplier failure can cause. Digital interconnectivity means insurance protection must consider multi-line impact, not just tech and data recovery.
2. Third-party and regulatory risks are growing - a single vendor compromise can halt operations. At the same time, regulations raise board-level accountability, creating greater executive risk.
3. Technology amplifies opportunity and exposure - AI introduces new cyber, Intellectual Property (IP), reputational, regulatory and operational risks that organisations need to address and plan for as part of their tech transition.
4. Resilience is continuous, not one-off - resilience requires always-on detection and multi-department coordination. Insurance underpins resilience, but coverage gaps are likely, and firms need help to recognise and plan for them.
-
For business leaders
1. Cyber risk is a strategic issue - systemic cyber incidents are rising. Today’s cyber incidents create operational, regulatory and reputational impact, not just data loss. Their complexity and cost should not be underestimated.
2. Supplier and regulatory risk rise - interconnected supply chains raise the risk of systemic disruption. Contracts, audits and continuity plans must anticipate these risks. Expanding and inconsistent regulations also create complexity and heighten executive liability.
3. AI is a double-edged sword - AI boosts productivity and resilience, but it also adds new cyber, IP, reputational and regulatory risks that require careful management.
4. Stay ahead of tomorrow’s threat - forward looking strategies that rethink risk capital allocation are needed. Insurance plays a vital role - but it's not the panacea - as there could be gaps in cover that need to be identified and planned for.
