Information Security (including Cyber)

Material risk in focus - May 2026

Information Security (including Cyber) was again the top-ranked risk in the H1 2026 Top Risk Review.

Often described as the risk that keeps risk managers up at night, Information Security (including Cyber) risk has been the highest-ranked risk in Top Risk Reviews since 2020.

However, responses to the Top Risk Review H1 2026 and the ORX loss data suggest that this is less due to realised losses and more a reflection of the potential scale of impact, including reputational impact, a single incident could have. Indeed, the effectiveness of risk management for this risk continues to grow, indicating industry confidence facing these threats.

Nevertheless, the cyber threat landscape continues to evolve at unprecedented speed, meaning organisations must remain constantly vigilant and cannot afford to become complacent or ease control focus.