What's the board's first question when a cybersecurity incident occurs?
Resolution time44%
Cost43%
Reputational Impact12%
Other (please share below!)
487 PARTICIPANTS
Resolution time44%
Cost43%
Reputational Impact12%
Other (please share below!)
Yes70%
No29%
Lack of mature vendor solutions39%
Trust in AI accuracy62%
Budget constraints18%
Skills to operate the tools25%
No selling.
No recruiting.
No self promotion.
Rules of EngagementFAQsPrivacy
© 2025 Gartner, Inc. and/or its affiliates. All rights reserved.
I guess the first question will be around "how long to fix this". The longer it takes, the more visibility it will have. This will impact the reputation of the organization and will cost more (customer loss, cost to fix, penalties if any).
But I agree with James, has it impacted any regulatory rules? Because this leads to another ball game: you will be audited by the regulator authority.
This also applies not only to Cyberattack but also for databreach/dataleak.