Cyber Resilience Under Siege: The 8 Biggest Challenges for Spanish Companies in 2025

Here’s the translation to American English:

The increase in cyberattacks, the lack of awareness among employees, and outdated technology are some of the main challenges faced by Spanish companies in their efforts to improve cybersecurity. Hiscox analyzes trends and risks in its latest report.

In an increasingly digitized world, cyber resilience has become a fundamental pillar for the survival of businesses. However, the path to effective protection is fraught with obstacles. According to the 2024 Cyber Preparedness Report from Hiscox, 96% of Spanish organizations have fallen victim to a cyberattack in the last year, highlighting the urgency of addressing the challenges that threaten their digital security.

The report, which analyzes the main challenges and risks for 2025, reveals that the rapid evolution of cyber threats is the biggest challenge for Spanish companies, cited by 19% of respondents. This is followed by the complexity of existing technological infrastructures (15%), limited budget for cybersecurity investments (13%), and a lack of awareness among employees (13%). These factors, combined with a shortage of skilled cybersecurity professionals (12%) and a lack of support from senior management (9%), paint a worrying picture for companies looking to strengthen their cyber resilience.

The most significant risks

The rise in cyberattacks is undoubtedly the most pronounced risk, reported by 70% of organizations. This phenomenon is exacerbated by the growing use of AI-based tools by cybercriminals, along with attacks from third parties and suppliers, which jeopardize the supply chain. Additionally, the increase in remote work (51%) has created new vulnerabilities, as employees access corporate systems and data from remote locations, often using personal devices.

Legacy technology, meaning systems that do not receive appropriate security updates, is another significant risk, mentioned by 25% of companies. This issue is compounded by the fast pace of security updates and the constant need to apply patches, leaving many organizations overwhelmed and exposed to security breaches.

Other notable risks include the use of personal devices for work (24%), lack of awareness among employees (21%), and cuts to the budget allocated for managing cyber risks (13%). Moreover, changes in regulatory requirements, such as the implementation of regulations like NIS-2 and DORA, add additional pressure to sectors like banking and insurance.

Trends for 2025

Hiscox has also identified several key trends that will shape the future of cybersecurity in 2025. Among them is a heightened state of alert for potential cyber threats, as well as the adoption of more robust approaches, such as the Zero Trust strategy, which aims to verify each access to corporate systems. Additionally, there is expected to be an enhancement in cybersecurity awareness and greater regulatory compliance, especially in a context of increasing regulatory pressure.

“Cybersecurity transcends technical responsibility, becoming an essential element for the continuity and growth of companies. Our report highlights the risks and challenges that Spanish organizations face in the current digital environment, emphasizing the importance of allocating the necessary efforts and resources to improve cyber resilience and protect business interests in the long term,” states Ana Silva, Head of Cyber Product Underwriting at Hiscox Iberia.

Conclusion

In an environment where cyberattacks are becoming increasingly sophisticated and frequent, Spanish companies must prioritize cybersecurity as a strategic element. Investment in technology, employee training, and the adoption of innovative approaches such as Zero Trust will be key to building strong cyber resilience and ensuring business continuity in an ever-evolving digital world.


Source: 2024 Cyber Preparedness Report, Hiscox.

Scroll to Top