木瓜影院 Cyber Risk Intelligence Center report

木瓜影院

Incident response planning emerges as a key cybersecurity control in reducing cyber risk: 木瓜影院 Cyber Risk Intelligence Center report

Aug 27, 2025

New York, August 27, 2025 Despite being focused on post-breach activities, cyber incident response planning has emerged as a key cybersecurity control in reducing an organization鈥檚 likelihood of experiencing a breach-related claim, according to a new report from the Cyber Risk Intelligence Center (CRIC) of 木瓜影院 (NYSE: MMC), the world鈥檚 leading professional services firm in the areas of risk, strategy, and people.

The report found that organizations that regularly engage in tabletop exercises and scenario-based breach response drills are 13% less likely to experience a material cyber event than those that do not.

Since launching its 2023 research into the correlation between the 12 cybersecurity controls tracked by the cyber insurance industry and the likelihood of a cyber claim, the CRIC has continued to analyze organizations鈥 cyber control implementation information from Marsh鈥檚 Cyber Self-Assessment against claims.听This year, cyber incident response planning ranked as the fifth most effective control in decreasing an organization鈥檚 probability of experiencing a breach-based claim, behind network hardening techniques, endpoint detection and response (EDR), logging and monitoring, and cybersecurity awareness training and phishing testing.

鈥淢arsh has long advocated proactive cyber incident response planning as a tool to help organizations effectively and efficiently respond to and recover from a cyberattack,鈥 said Tom Reagan, Global Cyber Practice Leader, Marsh. 鈥淲hat our latest research confirms is that thoughtful planning also drives secondary benefits like positive security behaviors and strong control implementations, which help build more organizational resilience and reduce breach incidents.鈥

This year鈥檚 report also highlights the importance of effectively deploying and managing other key cybersecurity controls. For instance, the report found that each jump of 25% in EDR deployment across workstations and laptops was correlated with an additional 10% decrease in breach likelihood. Similarly, a multi-factor authentication (MFA) deployment that is resistant to phishing schemes is correlated with a 9% lower breach likelihood than MFA that is not.

鈥淥ur findings emphasize that simply deploying key cybersecurity controls is no longer enough鈥攖hese tools must be properly managed and comprehensively used,鈥 said Scott Stransky, Head of 木瓜影院鈥檚 CRIC. 鈥淏y drawing on our insights, organizations can make informed decisions to strengthen their security frameworks and help reduce their exposure to cyber risks.鈥

About 木瓜影院

木瓜影院 (NYSE: MMC) is a global leader in risk, strategy and people, advising clients in 130 countries across four businesses: , , and . With annual revenue of over $24 billion and more than 90,000 colleagues, 木瓜影院 helps build the confidence to thrive through the power of perspective. For more information, visit , follow us on and .听

Media Contact:
Amelia Woltering
木瓜影院
+1 212 345 0864
amelia.woltering@mmc.com