73% of Organizations Say They Are Not Fully Ready for a Major Cyberattack

A recent study reveals that 73% of organizations aren't fully prepared to withstand a major cyberattack, despite having incident response plans and security tools. The core issue isn't simply having these capabilities, but rather the ability to execute them effectively, particularly due to coordination breakdowns between technical teams, executives, legal, communications, and business operations. Key challenges include a lack of executive involvement, delayed decision-making, poor visibility across environments (including OT/ICS), and a reliance on narrow technology ecosystems. Organizations are increasingly adopting AI, but it needs to be integrated into mature workflows, not replace fundamental readiness practices. To improve, companies should define decision rights proactively, test cross-functional coordination, validate visibility across environments, and treat incident response as an ongoing operational discipline.