THE MOBIUS GROUP 2026 DIGITAL SECURITY SURVEY

The results confirm a strong shift from compliance‑driven approaches to risk‑based digital security strategies, with cyber security firmly positioned as a board‑level priority. However, progress remains uneven across organisations.

• Human‑centric threats remain dominant, with social engineering, phishing, business email compromise, and data breaches featuring among the highest‑rated risks in 2026.
• 45% of respondents indicate their Third‑Party Risk Management (TPRM) programmes are fully optimised and effective, leaving more than half exposed to elevated third‑party and supply‑chain risk.
• The most common cyber security skills shortages are in Artificial Intelligence and other modern technologies.
• Independent assurance is widely valued, with 57% of organisations using external expertise regularly and a further 41% occasionally to strengthen control assurance and address skills gaps.
• 40% of organisations conduct cyber incident simulation testing more than once a year, while 22% still test on an ad hoc basis or not at all, highlighting gaps in incident preparedness.
• Encouragingly, 84% of respondents report having a defined digital security improvement roadmap, although 45% of these organisations lack the budget or resources to fully execute it.

At the same time, organisations are increasingly prioritising application, API, and cloud security, alongside stronger AI and emerging technology governance, to build resilience and maintain digital trust.

Download the free survey to explore the full findings, maturity trends, and priority actions for building resilient, trusted, and future‑ready digital environments.