Cyber Roles and Responsibilities Study 2025

Report - April 2025

This in-depth study is the latest in a series of reports from ORX Cyber focusing on roles and responsibilities for cyber risk management.  

Following on from our previous work in 2019, 2021, and 2022, this report provides an updated view of the previous studies, and some new elements based on subscriber feedback. This edition of the study looks at: 

• General operating model for cyber risk management
• Cyber team structures, people and skills
• Roles and responsibilities for specific cyber risk management activities
• Focus of 2LOD cyber risk testing/monitoring/oversight
• 2LOD cyber risk reporting
• Cyber risk management budgets 

Our full report on Cyber Roles and Responsibilities Study is available to all ORX Cyber subscribers.

Contacts: