Adoption and implementation of cyber security controls have risen over the past two years, according to a report Wednesday from Marsh.
The broker’s Cyber Risk Intelligence Center used answers from clients’ cyber self-assessments to study how policyholders are utilizing risk management tools to mitigate cyber threats.
Since the first report in 2023, the implementation rate for advanced endpoint security/endpoint detection and response has risen to 91% from 82%.
Fixing known vulnerabilities with software updates, known as “patching,” is a critical step in maintaining cyber defenses. The implementation rate for setting target windows to patch critical severity vulnerabilities rose to 89% in 2025 from just 24% in 2023, according to the report.
The implementation rate for conducting internal phishing campaigns at least annually rose slightly to 91% from 89% previously as cyber awareness training also demonstrated increased value, “highlighting the importance of maintaining an educated and vigilant workforce,” Marsh said.
Training also extends to incident response planning. Cyber incident response planning ranked as the fourth-most-effective control in decreasing an…
