Bitsight Report Finds Lack of Visibility, AI, and Third-Party Risk Driving Cybersecurity Workforce Strain

New findings reveal 90% of cyber leaders say risk management is harder than ever, with burnout rising and only 17% achieving full visibility into threats

BOSTON, July 29, 2025 /PRNewswire/ -- Bitsight, the global leader in cyber risk intelligence, today released its "State of Cyber Risk and Exposure 2025" report, revealing that organizations worldwide face unprecedented challenges in managing cyber risks. Based on a global survey of 1,000 cybersecurity and cyber risk leaders from companies with 500+ employees, the data highlights critical areas where organizations are struggling to effectively communicate risk.

According to the report, 90% of surveyed leaders find managing cyber risks harder today than five years ago, mainly due to the explosion of AI (39%) and rapidly expanding attack surfaces (38%). These evolving threats are also fueling high rates of burnout, with 47% of cybersecurity and cyber risk professionals reporting exhaustion.

Another key factor in the burnout crisis is the lack of threat visibility. Those who work at organizations with the tools to regularly map threats across their environments and contextualize them with multiple risk factors for full visibility – a capability that just 17% have – experience a significantly lower burnout rate of 44%. Those who don't have a burnout rate of 63%.

Key findings include:

• Cyber Programs Aren't Keeping Up with Business Needs: Despite growing investment in cybersecurity, just 29% of organizations have a formal program that's truly aligned with business objectives – while 1 in 5 still admit their practices are "immature." 
• Monitoring Is a Top Priority, But Still Out of Reach: Security leaders overwhelmingly rank continuous monitoring as their number one priority, yet only 17% have the capability to do it – leaving major gaps in threat detection, prioritization, and response. 
• Third-Party Risk Is Monitored Sparingly, And At Great Cost: Nearly all organizations (99%) assess vendor risk, but only a third monitor those relationships over time. It's a dangerous blind spot, considering 30% of breaches last year were tied to third parties, doubling from the previous year.
• Risk Communication Falters Without Full Visibility: Just 28% of organizations say they are "very effective" at communicating cyber risk to leadership. But those with strong asset visibility are 2.5 times more likely to get the message across to the board.

"As AI-automated threats accelerate, organizations are struggling with both the technical complexities of risk management and the critical need to align cybersecurity efforts with business priorities," said Stephen Boyer, Chief Innovation Officer at Bitsight. "The data clearly show that continuous monitoring and comprehensive visibility into cyber risk intelligence are no longer optional – they are foundational for effective risk management and communication, and for combating the increasing rates of burnout within security teams."

The study emphasizes the urgent need for organizations to move beyond basic vulnerability management and embrace a data-centered, automated approach to cyber risk.

For more information, download Bitsight's comprehensive annual "State of Cyber Risk and Exposure 2025" report here.

About Bitsight

Bitsight is the global leader in cyber risk intelligence, leveraging advanced AI to empower organizations with precise insights derived from the industry's most extensive external cybersecurity dataset. With more than 3,400 customers and 65,000 organizations active on its platform, Bitsight delivers real-time visibility into cyber risk and threat exposure, enabling teams to rapidly identify vulnerabilities, detect emerging threats, prioritize remediation, and mitigate risks across their extended attack surface.

Bitsight proactively uncovers security gaps across infrastructure, cloud environments, digital identities, and third- and fourth-party ecosystems. From security operations and governance teams to executive boardrooms, Bitsight provides the unified intelligence backbone required for confidently managing cyber risk and address exposures before they impact performance.

For more information, visit bitsight.com, read our blog, or connect with us on LinkedIn.

SOURCE Bitsight