Enterprises Grapple with Declining Confidence in Cyber Incident Preparedness Amidst Evolving Threats

A recent study by business resilience specialists, IO, reveals a concerning trend: confidence among cybersecurity managers in the UK and US regarding their ability to manage a major cyber incident has plummeted from 61% to a mere 41% over the last year. This substantial decrease in confidence comes at a time when the cyber threat landscape is becoming increasingly challenging, marked by the rapid adoption of AI, expanding attack surfaces, and the emergence of more sophisticated threat actors. This decline in confidence is a critical indicator for practitioners. It signals a growing awareness of the formidable challenges posed by modern cyber threats, yet it's juxtaposed with a troubling lack of action. The report highlights that fewer than half (45%) of organizations regularly test their incident response plans. Even more alarmingly, only 39% have a designated incident response team or a documented incident response plan. This disparity between recognizing the threat and implementing robust preparedness measures creates a significant operational risk. For many organizations, a cyber-attack is now considered the single biggest threat to their ability to continue trading. This trend fits within a broader, well-established narrative in cloud and DevOps: the increasing sophistication of cyber threats necessitates a corresponding evolution in incident management strategies. The shift from traditional, on-premise infrastructure to distributed cloud environments, coupled with the rapid pace of DevOps deployments, has expanded the attack surface considerably. Furthermore, the rise of AI-powered attacks and ransomware-as-a-service means that incidents can escalate rapidly, demanding faster and more coordinated responses. The 2026 Unit 42 Incident Response Report, for instance, noted that 90% of attacks utilized identity vulnerabilities across multi-surface environments, highlighting the need for comprehensive security across endpoints, cloud, and SaaS applications. In practice, this means that organizations can no longer afford to view incident management as a reactive IT function. Practitioners must advocate for and implement a proactive, holistic approach. This includes not only developing comprehensive incident response plans but also regularly testing them through simulations and drills. Investing in dedicated incident response teams and ensuring they are adequately staffed and trained is paramount. Furthermore, the integration of AI into incident response, as seen in platforms that automate alert triage and root cause analysis, can significantly reduce Mean Time To Resolution (MTTR). The focus should be on building resilience through continuous improvement, learning from every incident (or simulated incident), and adapting strategies to counter the ever-evolving threat landscape. Ignoring these warnings will likely lead to prolonged operational disruptions and significant financial and reputational damage.