A new PwC report reveals a significant gap in how companies quantify and manage their cyber risks financially. The 2025 Global Digital Trust Insights survey, which polled 4,042 business and technology executives from 77 countries, found that only 15% of organizations are measuring the financial impact of cyber risks to a significant extent.
This low adoption rate of cyber risk quantification practices could leave many companies financially vulnerable to cyber threats. The report, released on September 30, 2024, highlights several key areas where organizations are falling short in their cyber risk management efforts.
While executives largely agree that measuring cyber risk is crucial for prioritizing cyber risk investment (89%) and allocating resources to areas of highest risk (87%), the vast majority are not putting this into practice. This disconnect between recognition and implementation represents a significant missed opportunity for many companies to better manage their cyber-related financial risks.
Barriers to Cyber Risk Quantification
The report identifies several obstacles hindering the wider implementation of cyber…