Building Cyber-Resilience: Bridging the Gap between Programs and Assessment

Osterman Research (sponsored by Immersive Labs) finds that while 86% of organizations report having cyber-resilience programs, 52% lack comprehensive assessment methods and only 6% use informative metrics to track vulnerabilities, intrusions, and data loss. The report highlights weaknesses in reactive learning, traditional training, certifications, board engagement, and employee preparedness, and recommends metric-driven assessments, continuous learning, skills development, updated certifications, and stronger board-level support to close the gap and improve resilience.