NEW YORK, USA. February 4th, 2025 – Panorays, the leader in third-party cyber risk management solutions, has released its 2025 CISO Survey for Third-Party Cyber Risk Management, providing insights on the evolving landscape of third-party cybersecurity. The report, based on insights from 200 CISOs across the U.S., explores the priorities, challenges, and trends shaping third-party cyber risk strategies for the coming year.
The findings make clear a stark reality: while 91% of CISOs report an increase in third-party cybersecurity incidents, only 3% have full visibility into their supply chains, including fourth and nth-party relationships. This lack of comprehensive visibility underscores the need for advanced tools and strategies to mitigate growing risks.
Key Findings:
- Rising Third-Party Incidents: 91% of CISOs experienced an increase in incidents over the past year, driven by unresolved vulnerabilities and expanding supply chain complexities.
- Resource Constraints: 98% of organizations leave at least 10% of third-party vulnerabilities unresolved due to limited resources.
- AI Adoption: 27% of CISOs currently use AI for vendor assessments, with 69% planning adoption in 2025 to enhance efficiency and scalability.
- Budget Disconnect: 81% of respondents report insufficient funding to address third-party risks effectively.
“This year’s survey reveals a troubling story: third-party risks are growing faster than the resources organizations have to address them,” said Matan Or-El, CEO of Panorays. “As supply chains become more complex and interconnected, the need for smarter, AI-driven solutions is no longer optional, it’s critical for businesses to stay secure.”
The Growing Role of AI in Third-Party Cyber Risk Management
The report emphasizes the transformative potential of AI in streamlining vendor assessments and mitigating risks. On average, organizations leveraging AI report a 44% reduction in time spent on assessments, enabling teams to focus on higher-value tasks.
A Call to Action for CISOs
With 95% of surveyed CISOs predicting a continued rise in third-party incidents in 2025, the need for proactive measures is more urgent than ever. Panorays’ report offers actionable insights to help organizations enhance visibility, prioritize risks, and allocate resources more effectively.
About the Survey
The 2025 CISO Survey was conducted in November 2024 in collaboration with Global Surveyz, an independent research company. Participants included CISOs from industries such as finance, healthcare, technology, and professional services, representing organizations with 1,000 to over 10,000 employees.
ENDS
The 2025 CISO Survey was conducted in November 2024 in collaboration with Global Surveyz, an independent research company. Participants included CISOs from industries such as finance, healthcare, technology, and professional services, representing organizations with 1,000 to over 10,000 employees.
ENDS