Global cybersecurity reports highlight gaps in resilience and rising demand for CISO services

Recent industry reports reveal significant vulnerabilities in corporate cybersecurity strategies. According to Qnap’s 2026 Global Business Cyber Resilience Report, which surveyed 1,838 companies across 93 countries, half of the participants rate their cyber resilience maturity as either ‘In development’ or ‘High risk.’

A primary concern is the over-reliance on backups as a sole security measure. While 83% of surveyed companies maintain external backups, 49% keep them permanently connected and unprotected against modification or deletion. This creates a risk where compromised administrator credentials allow attackers to encrypt or erase backups. Additionally, 24% of companies rely only on basic usernames and passwords for primary storage systems, and 29% lack internal threat detection mechanisms.

Separately, Sophos’s 2026 MSP Perspectives report indicates a shift in security leadership. As organizations struggle to manage complex risks and regulatory compliance, Managed Service Providers (MSPs) are increasingly stepping into strategic roles. Currently, 46% of MSP clients rely on them to act as their Chief Information Security Officer (CISO). Looking ahead, 84% of MSPs expect demand for CISO services to increase over the next 12 months.