Cybersecurity at a Crossroads

Cybersecurity is at a crossroads

United Kingdom, Nov 11, 2025

What the newly released Microsoft Digital Defence Report reveals, and how it aligns with the Logicalis CIO Report earlier this year

Authored by Scott Hodges, Head of Cloud.

This year's Microsoft Digital Defence Report (MDDR) 2025 has been released, offering a perspective on how the global threat landscape continues to evolve and what that means for organisations navigating digital transformation and risk management.

There's a lot to digest, but several common themes align with the Logicalis CIO Report 2025 published earlier this year. Although the vantage points differ, both reports converge on the same core message: cybersecurity has become a business-critical function, requiring alignment among IT operations, board-level strategy, and measurable resilience.

No longer just an IT risk, cybersecurity is now a business imperative

Microsoft makes it clear: Cybersecurity must be managed at the board level. The MDDR places this as its top recommendation, highlighting that effective governance depends on tracking metrics such as MFA coverage, patch latency, and incident response times—not just within IT but also as part of overall business performance.

Logicalis' CIO Report mirrors these findings, showing that 94% of CIOs now report directly to the board. Technology and, by extension, security are no longer just support functions. The real challenge for leaders in 2025 is translating technical posture into business risk and business impact language, helping boards understand not just where vulnerabilities exist, but what they mean for continuity, regulation, and reputation.

Spending more doesn't mean you're spending smart

The security spending paradox: Organisations are spending more than ever on security, so why are breaches still happening? The Logicalis CIO Report found that 88% of organisations suffered a cyber incident in the past year, and nearly half admitted to overinvesting in tools they don't fully utilise. Microsoft's findings in the MDDR explain why: Attackers continue to exploit the simplest weaknesses, and identity remains the number one attack vector.

The MDDR's data shows that 97% of identity attacks are password spray attempts, and that MFA continues to block 99% of unauthorised access.

It's a powerful reminder that adequate security isn't about volume of spend, it's about focus. Enforcing phishing-resistant MFA, improving identity hygiene, and consolidating overlapping tools can achieve far greater impact than scattered investments across complex stacks.

AI: Innovation, exposure, and the Governance gap

AI rightly dominates both reports. Logicalis' CIO Report found that 95% of organisations are investing in AI for growth, though 64% haven't yet seen expected returns. The MDDR offers a different perspective, adversaries are also using AI to generate deepfakes, automate vulnerability discovery, and AI-driven scale phishing campaigns that are now three times more effective than before.

This balance between opportunity and exposure is where the AI challenge lies in 2025.

We need to use AI as part of our defence to make sense of the noise, detect faster, and respond automatically. But we can't just deploy it and hope for the best. Strong governance around how AI is developed and applied is essential if we want to harness its power without creating fresh vulnerabilities.

For technology leaders, success will lie in balancing AI-driven opportunities with AI-aware defence-building governance, integrating innovation from the outset.

Unravelling complexities through resilience and partnerships

The MDDR emphasises that cyberattacks are inevitable; therefore, building resilience and continuously testing is crucial. That includes isolated, restorable backups, Zero Trust architectures, and clear recovery procedures for hybrid cloud and identity systems.

Microsoft also highlights that over 40% of ransomware incidents now involve hybrid components, so to keep up, defenders must respond at pace—detecting faster with automated responses and strategies built for scale. Logicalis found that 59% of CIOs see their vendor ecosystems as overly complex, and 42% struggle to gain unified visibility across their digital estates.

The battle with complexity is where partnerships become essential. Simplifying the security stack, integrating cloud monitoring, and consolidating visibility across technologies such as M365 and hybrid platforms can transform resilience from a goal into an achievable, measurable outcome.

Unlocking strategic support through healthy vendor relationships

Logicalis works closely with Microsoft and other vendors and can help your organisation align its security strategies with these recommendations and leverage Microsoft-funded programmes to accelerate your security initiatives. If you're looking to strengthen your security posture, we can support you with:

  • Security workshops
  • Assessments
  • Tool deployments enablement
  • Funding pathways for eligible customers

We also provide a comprehensive security portfolio that goes beyond just Microsoft technologies with our Intelligent Security offering, which encompasses advisory, managed detection and response, cloud governance, automated security validation, and Zero Trust strategy, all designed to simplify complexity and drive measurable resilience.

Look forward to the upcoming year

The Microsoft Digital Defence Report 2025 builds on what the Logicalis CIO Report highlighted earlier this year, cybersecurity has evolved beyond defence, it's now a strategic capability that underpins business success and can ultimately make or break an organisation.

Aligning innovation with governance and resilience with transparency are now the most significant challenges technology leaders face. The insights from both reports give us a clear sense of where to focus next:

  • Elevate cybersecurity to the boardroom
  • Prioritise identity and foundational controls
  • Harness AI responsibly
  • Simplify through partnerships

Though the perspectives differ, both reports reinforce a single truth: Resilience is now the ultimate measure of digital maturity, an essential design principle, and a critical objective for leaders. With actionable frameworks, available funding, and a partner ecosystem dedicated to advancing progress, the opportunity to make that resilience real has never been stronger.

 

Topic

Related Insights