This October, we’re using Cybersecurity Awareness Month to spotlight the gap between how boards think about cyber risk and what really happens when incidents hit. WTW’s Cyber in Focus 2025 brings together 4,650 claims and boardroom survey data to show where confidence and reality diverge — and what that means for revenue, reputation, resilience, and regulation.
Cyber protection designed for the business
Revenue
Downtime costs more than preparation. A three-week outage can wipe out a quarter’s earnings.
Reputation
Trust evaporates fast. The difference is how you respond, not whether you’re breached.
Resilience
Plans on paper don’t count unless they’ve been tested. Regulators are now asking for proof.
- Insight — AI in Healthcare: Who pays when AI fails?
- Service: Cyber Crisis Management workshop
Regulation
Compliance alone won’t protect you. Cross-border rules, fines, and liability now demand active governance.
- Briefing — Take ownership of cyber governance in your organization
- Article — Avoiding the AI pitfalls
- Spotlight on WTW’s comparative table (SEC, EU, UK requirements).
About the report
Cyber in Focus: The Business Risk draws on 4,650+ claims across more than 90 countries, combined with boardroom survey data from the Willis Global Directors & Officers Survey. Updated for 2026, it reflects the current claims environment, including emerging AI-linked incidents and evolving third-party breach patterns.
