1、Wavestone Cyber Benchmark2025 EditionWhat is the market maturity?June 2025 WAVESTONE|2Based on NIST Cybersecurity framework and ISO 27001/2,the W-CyberBenchmark,our 360 assessment approach,goes further and provides:Wavestone Cyber Benchmark:an in-depth analysis of the level of cybersecurity maturity

2、A comprehensive approach with an organizational and a technology maturity assessmentA benchmark vision:170+Wavestone customers have already completed the assessment over the past years,presenting more than 7 millions employeesAn assessment that takes into account the complexity of organizations that

3、 have different entities with different maturity levelsRisk managementThird-partiesmanagementAsset managementNetwork securityApplication securityWorkplaceGovernance150+companiesOperational SecurityData protection200 questionsDetectionIdentity&Access Management16 topicsPhysical SecurityReactionResili

4、enceIndustrialControl SystemCloud securityRisk managementNetwork securityApplication securityWorkplaceGovernance170+companiesOperational SecurityData protection200 questionsDetectionIdentity&Access Management16 topicsPhysical SecurityReactionResilienceIndustrialControl SystemsCloud securityAsset man

5、agementThird-party management WAVESTONE|3Overall maturity for large organizations is still increasing(+1 point since 2024),but the pace is slowing downLarge organizations*54/100Regulations have a major impact on maturity*Companies with a turnover over$1B(100+org.)FinanceServicesEnergy&UtilitiesIndus

6、tryLuxury&RetailFinancial sector is well ahead in overall maturityHow mature are large organizations?62.5 +2.5%53.451.750.449.0Max.88.977.673.766.967.3 WAVESTONE|3RegulatedNon-Regulated58.352.3=(critical infrastructure and DORA)WAVESTONE|44.9%5.3%6.3%6.8%8.1%Luxury&RetailEnergy&UtilitiesFinanceIndus