What we found
The licences are already paid for
85% of UK IT decision makers aren't actively optimising their Microsoft licensing. Less than half have switched on EDR/XDR, SIEM/SOC monitoring, or insider risk management. The security capability is there. It just hasn't been switched on. That's a conversation waiting to happen in almost every account you own.
AI is everywhere. Governance isn't
69.5% of organisations have AI deployed in some form. 25.8% say AI adoption and governance is their single biggest operational pressure right now, the number one answer across the entire survey. Employees are using tools their IT teams can't see or control, and the data exposure risk is growing every day.
Confidence isn't the same as coverage
65.8% of UK IT leaders either acknowledge visibility gaps or still rely on manual threat detection. Only around one in four have comprehensive visibility into user risks, device risks, or AI usage. The organisations that feel most protected aren't always the ones that are.
The supply chain is the biggest blind spot
Third-party breaches were the most common incident type last year, at 22.8%. Only 15% of organisations continuously review third-party access. The attack surface has shifted. Most security investment hasn't followed it.