An expanded threat landscape, the consistently changing tide of workers in and out of jobs, and the proliferation of AI as a tool for threat actors continue to contribute to a vast, complex, and dangerous cybersecurity ecosystem.

Further, the human factor continues to be a major concern, as Proofpoint’s Data Loss Landscape report found that mistakes by employees is the biggest data loss problem facing companies.

This is potentially why nearly three quarters (70%) of CISOs believe their business is at risk from a cyber-attack in the next year, up from 68% in 2023, and 48% in 2022.

According to Proofpoint’s new report which surveyed 1,600 security leaders, CISOs are feeling confident, and fearful, for the coming year in cyber.

Less than half (43%) of CISOs believe they are not prepared for a targeted cyber-attack, down from 61% in 2023 and 50% in 2022.

While it is positive to see an increase in CISO confidence, it remains to be seen if this is hubris amid the growing threat landscape and their own cyber concerns. Further, this still leaves over four in ten not confident in their team’s ability to handle a cyber-attack.

The Human Element

While social engineering and ransomware continue to plague firms, nearly three-quarters (74%) of CISOs label human error as their most significant cyber vulnerability, an increase from 60% in 2023 and 56% in 2022.

Four out of five (80%) think some key cyber concerns in the next two years will include human risk and employee negligence.

Recommended reading

• Report: Vulnerability Exploitation Surge Endangers Cybersecurity
• Comment | Cybersecurity Ethics in an Age of Evolving Cyber Risk
• Cyber Leaders Reveal Compliance and Boardroom Struggles

This is despite most (86%) thinking that their employees understand their role in protecting the business from cyber-threats.

Besides human error, around two-fifths (41%) believe ransomware will be a top threat in the next year.

Great Expectations

CISOs have said that their place in the boardroom has solidified in the past few years, with more citing that they see eye to eye with their boards (84%), a huge uptick from 61% in 2023.

However, this heightened recognition is likely due to increases cyber pressures, which is in turn, placing greater responsibility and demand on cyber teams.

Over half (53%) of CISOs have either experienced burnout themselves, or seen someone on their team experience it, in the past year.

Two-thirds (66%) of CISOs have found that the expectations placed on them are excessive, which marks an increase from 61% in 2023, 49% in 2022, and 21% in 2021.