Sustained Cybersecurity Focus Rare After Breaches, ManageEngine Report Finds
Event summary
- Only 8% of organizations make cybersecurity a permanent priority after a breach, per ManageEngine's survey of 700 IT and cybersecurity leaders in the U.S. and Canada.
- 80% of respondents say heightened attention to cybersecurity lasts just 1–6 months post-incident.
- 59% report that business priorities often push security initiatives aside.
- 67% of organizations using AI in cybersecurity act on AI-generated recommendations without additional verification.
The big picture
ManageEngine's report highlights a critical gap in organizational cybersecurity posture: despite widespread confidence in their defenses, most companies fail to maintain focus on security after incidents. This trend underscores broader challenges in aligning cybersecurity with long-term business priorities, particularly as AI adoption reshapes risk evaluation. The findings suggest that structural and cultural barriers often prevent sustained improvements in cybersecurity resilience.
What we're watching
- Sustained Vigilance
- Whether organizations can institutionalize cybersecurity as a permanent priority beyond the immediate aftermath of a breach.
- AI Oversight
- The pace at which organizations implement additional verification for AI-generated cybersecurity recommendations.
- Risk Tolerance
- How organizations balance acceptable risk levels against the need for continuous reassessment of cybersecurity strategies.
Related topics