Only 5 percent of organizations worldwide report full trust in their cybersecurity vendors, according to a global study released Monday, highlighting growing concerns over transparency and risk management in digital security.
The study, based on responses from 5,000 organizations across 17 countries, found that 95 percent of respondents lack complete confidence in their cybersecurity providers, while 79 percent said they struggle to assess the trustworthiness of new vendors.
More than half, or 51 percent, said the lack of trust increases anxiety about the likelihood of a major cyber incident.
The findings point to a widening gap between cybersecurity performance and user confidence, as organizations face persistent cyber threats, tighter regulations and increased adoption of artificial intelligence tools.
“Trust is not an abstract concept in cybersecurity, it’s a measurable risk factor,” said Ross McKerchar, chief information security officer at Sophos. “When organizations can’t independently verify a vendor’s security maturity, transparency, and incident handling practices, that uncertainty flows directly into boardrooms and security strategies.”
The report also found that 62 percent of respondents encounter difficulties evaluating even their existing cybersecurity providers.
Researchers said organizations increasingly require verifiable proof of security capabilities, including independent assessments, certifications and demonstrated operational performance, when selecting vendors.
“Trust is shifting from a marketing message to a defensible compliance requirement,” said Phil Harris, research director for governance, risk and compliance solutions at IDC.
The study noted that as artificial intelligence becomes embedded in cybersecurity systems, organizations are also scrutinizing how these technologies are deployed, including issues of transparency and governance.
Experts said the lack of accessible and detailed information remains a key barrier to evaluating vendor trust, forcing companies to rely on limited or unverifiable claims.
The findings underscore the role of trust as a central factor in cybersecurity decision-making, influencing both operational risk and board-level strategy.
————————————————————————-
TEN YEARS OF TECHSABADO!
PLEASE LIKE our FACEBOOK PAGE and SUBSCRIBE to OUR YOUTUBE CHANNEL.
WATCH TECHSABADO ON OUR YOUTUBE CHANNEL:
WATCH OUR OTHER YOUTUBE CHANNELS:
PLEASE LIKE our FACEBOOK PAGE and SUBSCRIBE to OUR YOUTUBE CHANNEL.
Leave a Reply