Cyber threats are accelerating. Attack volumes are rising. And yet many security and business leaders across New Zealand mistakenly believe they're prepared.
But our latest research has found that only 32% of organisations are ready to respond when an attack hits.
Datacom's 2026 Cybersecurity Index draws on a commissioned survey of more than 700 New Zealand and Australian business and security leaders, and uncovers a striking disconnect between perceived resilience and operational reality.
The findings are a wake-up call:
- 75% of New Zealand and Australian organisations report good visibility into cyber risk and the resources to manage an attack.
- Yet fewer than one in three (30%) in New Zealand and (32%) in Australia have a tested business continuity or cyber incident response plan in place,
- Most leaders expect to recover from a major incident within 1-3 days, but real-world evidence tells a very different story, with recovery typically taking weeks or months.
The report goes further, examining:
- How AI is reshaping both the threat landscape and cyber defence strategies.
- Why traditional cybersecurity service partnerships are no longer fit for purpose.
- The cultural and data sovereignty factors quietly influencing cyber readiness across New Zealand and Australian organisations.
Whether you're responsible for security strategy, infrastructure, risk, compliance or technology leadership, this report delivers the benchmarks, insights and context you need to pressure-test your organisation's true cyber resilience.
Download the Datacom 2026 Cybersecurity Index
Get your copy now and find out where New Zealand organisations are falling short — and what leading organisations are doing differently.
