Cyber Security Tribe's

Annual State of the Industry Report 2025

The Cyber Security Tribe's 2025 Annual State of the Industry Report offers an in-depth analysis of the current cybersecurity landscape, comparing it to findings from 2024.

The survey, conducted between December 2024 and January 2025, gathered responses from over 350 cybersecurity professionals. Like last year, the report focuses on three key areas: People, Process, and Technology. In addition to the survey results, we invited leading cybersecurity experts to provide their perspectives through detailed responses on various topics covered.

This report serves as a valuable benchmarking tool for assessing your cybersecurity priorities and needs for the remainder of 2025 and into 2026.
 

Download the report to discover:

Benchmark Your Cybersecurity Strategy – Compare your organization’s cybersecurity priorities against industry trends and expert insights to ensure you're on the right path for 2025 and beyond.
Benchmark Your Cybersecurity Strategy – Compare your organization’s cybersecurity priorities against industry trends and expert insights to ensure you're on the right path for 2025 and beyond.
Insights from 350+ Cybersecurity Professionals – Gain a data-driven perspective on critical topics such as hiring trends, investment priorities, AI governance, and incident response strategies.
Insights from 350+ Cybersecurity Professionals – Gain a data-driven perspective on critical topics such as hiring trends, investment priorities, AI governance, and incident response strategies.
Expert Analysis on Emerging Threats and Technologies – Learn from leading cybersecurity experts about the evolving risks in non-human identity management, agentic AI, and security frameworks.
Expert Analysis on Emerging Threats and Technologies – Learn from leading cybersecurity experts about the evolving risks in non-human identity management, agentic AI, and security frameworks.
Improve Your Cybersecurity Culture – Discover best practices for security awareness training, employee concerns, and CISO board support to enhance your organization’s security posture.  
Improve Your Cybersecurity Culture – Discover best practices for security awareness training, employee concerns, and CISO board support to enhance your organization’s security posture.
Actionable Takeaways for 2025 and 2026 – Use this report as a roadmap to refine your cybersecurity initiatives, align with industry standards, and make informed decisions on technology investments.
Actionable Takeaways for 2025 and 2026 – Use this report as a roadmap to refine your cybersecurity initiatives, align with industry standards, and make informed decisions on technology investments.
2025 Annual Report Thumb

Download Report Here

Report Contributors

Lamont Orange Cyber Security Tribe

Lamont Orange

Global Chief Information Security Officer, Cyera

Herman Brown 100 x 100 - Cyber Security Tribe

Herman Brown

CIO, San Francisco District Attorney’s Office

Eric Harris Cyber Security Tribe

Eric Harris

CISO, U.S. Department of Veterans Affairs

Jason Elrod

Jason Elrod

CISO, MultiCare Health System

Rizwan Jan 100 x 100 Cyber Security Tribe (1)

Rizwan Jan

CIO, CNA

Kapil Bareja 100 x 100 Cyber Security Tribe

Kapil Bareja

Digital And Cyber Risk Governance Leader

Dr. Vivian Lyon 100x100 Cyber Security Tribe

Dr. Vivian Lyon

CISO, Plaza Dynamics

Noureen Njoroge Cyber Security Tribe Advisory Board Member

Noureen Njoroge

WiCyS

Randall Frietzsche - Cyber Security Tribe

Randall Frietzsche

CISO, SoftBank Investment Advisers

Andrew Wilder Cyber Security Tribe

Andrew Wilder

Retained CSO, Community Veterinary Partners

Sabino Marquez Cyber Security Tribe

Sabino Marquez

CTrO - Trust Officer

Report Summary

The Cyber Security Tribe's 2025 Annual State of the Industry Report offers a thorough examination of the cybersecurity landscape, drawing insights from a comprehensive survey with over 350 cybersecurity professionals responding. Respondents, who were in the majority from North America with a seniority of C-Suite, answered questions on the following subjects:
 

Technology

  • 2025 Investment Priorities
  • Data Security Spotlight
  • AI Governance and Policies 

People

  • CISO Board Support
  • Leadership Decisions: Staff Concerns
  • Leadership Decisions: Recruitment

Process

  • Policy Reviews
  • Security Frameworks
  • Incident Response
Within the report, each of the above subjects reveals key statistics from the industry, as well as  expert analysis provided by leading practitioners giving further insights for our community. 
Download

A Snapshot of the Report Statistics

41%

Cybersecurity leadership will invest in data security in 2024

59%

Anticipate their staff will remain the same in 2024

60%

Organizations that have AI policies in place

39%

Cybersecurity leadership will invest in data security in 2025, which was also the top investment area in 2024. 

87%

Of CISOs believe they have the support of your Board, which is an increase from 66% last year.

65%

Organizations that have AI policies in place, which has increased up 5% from 60% last year.

Data Security Investment 2024 (990 x 500 px)
Data Security - Top Investment Priority
The top ranked investment area for 2024

41%

Cybersecurity leadership will invest in data security in 2024

cybersecurity staff will increase in 2024 (990 x 500 px)
Staffing levels to remain the same
Expectations by cyber leaders for recruitment in 2024

59%

Anticipate their staff will remain the same in 2024

ai policy (990 x 500 px)
Most organizations have AI policies
How to balance regulation with innovation?

60%

Organizations that have AI policies in place

Insight Partner: Cyera

Key insights into the reasons as to why data security was highlighted as the top investment priority for 2025 by senior cybersecurity professionals is provided by our insight partner - Cyera. 

Cyera is the data security company that gives businesses context and control over their most valuable asset: data. As a pioneer in Data Security Posture Management, Cyera instantly provides companies visibility over their sensitive data, context over the risk it represents and their security exposure, and automated remediation to reduce the attack surface and ensure operational resilience. 

cyera logo