Report
Cyber Roles and Responsibilities Study 2025
Service
ORX Cyber
Community
ORX Cyber Community
Risk programme
Management, Practice & Framework
Report - April 2025
This in-depth study is the latest in a series of reports from ORX Cyber focusing on roles and responsibilities for cyber risk management.
Following on from our previous work in 2019, 2021, and 2022, this report provides an updated view of the previous studies, and some new elements based on subscriber feedback. This edition of the study looks at:
- General operating model for cyber risk management
- Cyber team structures, people and skills
- Roles and responsibilities for specific cyber risk management activities
- Focus of 2LOD cyber risk testing/monitoring/oversight
- 2LOD cyber risk reporting
- Cyber risk management budgets
Download the free summary
The full report on Cyber Roles and Responsibilities Study is available to all ORX Cyber subscribers, but we've also created a free summary report for non-subscribers to download.
Gated content start
The full report is only available to firms that subscribe to ORX Cyber
If your firm subscribes to ORX Cyber, log in or register to read this resource.
Not a subscriber? Download the free summary report for highlights and insights.
Gated content stop
Contacts:
Simon Johnson
Head of Services, ORX
Nikki Truss-West
Research Senior Manager - Cyber, ORX
Roberto Cappiello
Assistant Research Manager – Insurance, ORX
Harry McMurtrie
Research Analyst, ORX
ORX Cyber
Our service dedicated to supporting cyber risk professionals in the second line of defence.
