KPMG: Cybersecurity is becoming the main risk to business growth
Read more
UzDaily
uzdaily.uz

KPMG: Cybersecurity is becoming the main risk to business growth

Leaders of major global companies are demonstrating growing confidence in their business prospects, yet they are exercising greater caution regarding the global economy. According to the results of KPMG's 12th annual global CEO survey for 2026, the share of CEOs confident in their organizations' growth over the next three years reached 84%, up from 79% in 2025. Meanwhile, trust in the global economy decreased from 68% to 65%, the lowest figure since 2021, KPMG Uzbekistan reported.

The survey was conducted from August 11 to September 21, 2026, among 1,400 business leaders from companies with annual revenues exceeding 500 million US dollars; one-third of these companies had revenues over 10 billion US dollars.

Financial forecasts also improved: about 68% of respondents expect annual growth of at least 2.5%, compared to 61% the previous year. At the same time, 79% of CEOs noted increased pressure related to ensuring the long-term development of their companies. The report authors note that leaders predict business growth despite increasing external uncertainty, while decisions concerning technology, risks, personnel, and sustainability are becoming increasingly interconnected.

Cybersecurity and data protection were most frequently cited as the main threat to business growth—31% of respondents pointed to this factor. Global economic uncertainty was named by 28%, geopolitical instability and regulatory pressure by 26% each, and supply chain sustainability risks by 24%. The difference between the four most frequently mentioned threats was no more than five percentage points, which, according to the report authors, indicates companies are preparing for several potential failure sources rather than focusing strategies around one dominant risk.

Cybersecurity also became the leading area for increasing risk mitigation spending, noted by 45% of respondents. Another 36% increased spending on compliance and reporting, and 32% invested in integrating artificial intelligence into operational processes. Most leaders stated that their risk appetite remained unchanged: 61% maintained their previous level of risk readiness, 16% were willing to take on greater risk for new opportunities, and 17% became more cautious. The remaining 6% prioritized risk reduction over seeking new opportunities.

Artificial intelligence has firmly entered corporate investment plans: 79% of CEOs consider it a key priority for the next three years, higher than 71% the previous year. Furthermore, 72% plan to allocate over 10% of their budgets to technology within the next 12 months. Two-thirds of respondents (66%) believe their organizations are adopting AI at an appropriate pace or ahead of the market. However, 29% expressed cautious optimism about their progress, while about 5% reported difficulties or uncertainty in outcomes.

Leaders identified ethical issues (57%), cybersecurity (52%), implementation costs (51%), and data sovereignty requirements (50%) as major obstacles to AI adoption. About 59% of CEOs believe that AI development requires closer attention to internal data governance and control mechanisms. Another 66% fear that the pace of AI regulation may become an obstacle for their companies. More than eight out of ten leaders expect that AI integration, cybercrime, and technology infrastructure costs will significantly impact their organizations' prospects, with the proportion of respondents citing each of these factors significantly increasing compared to 2025. Companies expect returns on AI investments in the medium term: 71% forecast a return within one to three years, and 17% within one year.

About 89% of CEOs expect workforce growth over the next three years, although 62% forecast an increase of less than 5%. Leaders highlighted skills shortage as the main workforce issue, mentioned by 56% of respondents. Employee training in AI was noted by 52% of respondents, and talent acquisition and retention by 47%. Employee resistance to AI adoption was considered one of the least significant problems, as only 26% identified it as a serious concern.

Over the next 12 months, 51% of CEOs plan to openly communicate with employees about how AI will change their job roles. Another 46% intend to launch reskilling programs, and the same percentage plans to provide specialized AI training.

Sustainability is increasingly integrated into corporate strategies. Over the past year, 63% of leaders made it their primary response to external environmental changes, 21% focused on areas most relevant to their business, and 14% expanded their initiatives. About 70% of CEOs consider the costs and potential returns of sustainability initiatives in some investment decisions and every major capital investment. However, 91% stated that differences in regulations and expectations across different markets create significant or moderate difficulties.

Key obstacles to achieving climate goals included decarbonizing supply chains (22%), differences in cross-jurisdictional regulations (20%), costs (16%), and lack of expertise (15%). Leaders have mixed views on the role of AI in sustainability: about eight out of ten believe the technology can help achieve climate goals, but 95% acknowledge concerns within their organizations about the impact of increased AI use on the environment.

Energy sources are another priority. Over the next three to five years, 49% of CEOs plan to focus primarily on diversifying external supplies through renewable or low-carbon energy sources. Another 37% intend to reduce consumption through efficiency improvements, and 13% plan to develop their own generation, storage, or backup capacity.

Saken Zhumashev, Managing Partner of KPMG Caucasus and Central Asia, noted that economic and geopolitical uncertainty, cyber threats, and regulatory changes have turned business growth and sustainability into interconnected challenges for companies in the region. He added that strategies must reflect the specific conditions of each market. According to him, the return on AI investment depends not only on technology spending but also on workforce development, robust data governance, and business process restructuring. He emphasized: 'Confidence in the future is the ability to adapt.'

Konstantin Aushev, Partner and Head of Technology at KPMG Caucasus and Central Asia, noted that global companies are concentrating AI implementation on projects with clear returns while simultaneously investing in protection against cyber threats. In the region, he said, priorities are similar, although companies pay slightly more attention to data governance and talent development than to cybersecurity. Gabit Musrepov, Head of ESG and Corporate Governance at KPMG Caucasus and Central Asia, stated that sustainability is becoming an important part of corporate strategy amid supply disruptions, energy issues, and new regulatory requirements. He noted that AI can help solve environmental problems but also requires significant resources, prompting companies to consider its environmental impact.

The report authors concluded that corporate growth increasingly depends not only on capital allocation. Cyber resilience affects both risk management and AI adoption. Workforce planning depends on solving the skills shortage problem, and energy solutions are becoming part of operational planning. KPMG identified the alignment of these decisions as the main management task for 2026. The firm stated that this requires a common understanding of value and clear accountability across strategic, technological, risk management, human resources, and sustainability domains. The survey covered CEOs from 12 countries: Australia, Canada, China, France, Germany, India, Italy, Japan, Netherlands, Spain, the United Kingdom, and the United States, and included 13 industries such as banking, energy, healthcare, infrastructure, manufacturing, technology, and telecommunications.

Similar stories

Minister of Digital Technologies calls for strengthening cybersecurity due to rising AI-related risks
Read more
podrobno.uz

Minister of Digital Technologies calls for strengthening cybersecurity due to rising AI-related risks

The Minister of Digital Technologies of Uzbekistan, Sherzod Shermatov, stated that risks in the field of digital security will continue to increase and strongly urged both state structures and private companies to increase spending on cyber protection.

According to him, it is necessary to regularly audit one's own systems for vulnerabilities and prepare qualified specialists. Shermatov noted that there has been an increase in reports of hacks and data leaks worldwide recently.

As an illustration, he cited examples of fund theft from the cryptocurrency platform Binance, as well as a recent controversy related to the possible leak of data belonging to 27 million citizens of Uzbekistan. Although information about this leak has not yet received wide coverage, the minister warned that similar incidents could recur.

Shermatov emphasized that the development of artificial intelligence has significantly facilitated the process of discovering weaknesses in existing information systems, which leads to an increase in the number of identified flaws and, consequently, to a rise in potential threats.

He stressed that when investing in artificial intelligence technologies, it is crucial to simultaneously invest in protection against associated threats. In the minister's opinion, organizations that develop and use digital systems should allocate a separate budget for ensuring cybersecurity.

Furthermore, it is necessary to constantly eliminate identified vulnerabilities, guided by the recommendations of the Security Service's Cybersecurity Center and data from the UzCERT service. The minister also addressed the youth, calling cybersecurity a promising area for career growth, as the demand for such experts is growing both in Uzbekistan and abroad.

Previously, information appeared online about a new potential personal data leak in the country. A few days after this incident, the Butterfly group disclosed the phone number and PINFL of Minister Sherzod Shermatov, threatening to publish the data of over 27 million residents on the darknet, although no official response from the agency had been received at that time.

Five Cyber Threats Worry South African Business Owners
Read more
techcentral.co.za

Five Cyber Threats Worry South African Business Owners

Risk managers in South Africa assess cyber incidents and business disruptions to be significantly higher than the global average. Benny Barnard from NEWORDER, returning from the CyberIsle 2026 conference on the Isle of Man, notes that five main concerns of business owners share a common root cause, and warns that handing over decisions to an AI-based automated tester leaves vulnerabilities unaddressed.

Most participants at the CyberIsle 2026 exhibition presented threat lists that largely overlapped. Benny Barnard, Commercial Director at NEWORDER, whose global headquarters are in Douglas, states: 'If you remove the logos from the slides, the message remains the same. Business owners are worried about five different things, but attackers primarily gain access through one channel. For any business, the key question is not which threat to fear the most, but whether it can continue trading tomorrow if any of them happen today.'

South Africa is More Worried Than The Rest of the World

According to the Allianz Risk Barometer for 2026, which surveys risk managers, brokers, and insurers in 97 countries, cyber incidents rank first among business risks in South Africa for the second consecutive year. Among those surveyed in South Africa, 48% cited this threat, compared to 42% globally, which is higher than 44% the previous year.

An even more alarming indicator is the next most significant risk. Business disruptions rank second locally with a figure of 40%, exceeding the global figure of 29% by 11 points and being seven points higher than last year. Artificial intelligence entered the top three for the first time in South Africa, taking third place with 30%.

Barnard emphasizes that 'South African enterprises are mainly not afraid of data loss; they are afraid of losing the ability to function. We have ten years of experience with this regarding electricity and infrastructure, but now cyberattacks are the most likely threat to disrupt trade.'

The Five Main Concerns

In major studies published this year, five issues consistently appear:

  • 'Being tricked and paying.' The World Economic Forum's (WEF) global cybersecurity outlook for 2026 showed that company leaders now rank cyber fraud first among cyber threats, surpassing ransomware programs for the first time. In 2025, nearly three out of four respondents were affected or knew someone who was affected.
  • 'Inability to trade.' Ransomware and subsequent shutdowns are the key issue behind South Africa's business disruption rate.
  • 'AI turning against the business.' The WEF found that the main AI-related problem was not what attackers could do with it, but information leakage by employees through generative AI tools.
  • 'Supplier as an entry point.' Only 3% of Allianz respondents worldwide consider their supply chains very resilient.
  • 'Accountability.' The King V principle, applicable to financial years starting January 1, 2026, or later, places data, information, and technology management on the board of directors. Nevertheless, the level of concern regarding legislation and regulation among respondents from South Africa decreased from fifth to ninth place this year. Concern over accountability decreased in the same year as the issue itself.

Two People, Two Different Threats

WEF data demonstrates something more worrying: company executives and Chief Information Security Officers no longer defend against the same threats. Company executives rank fraud first, while security leaders still rank ransomware first, and supply chain disruption second.

Barnard comments: 'The person signing the budget and the person spending it protect different doors. This is not a technological problem, but a leadership problem. Security must be in the same room as the business decisions it protects, which we mean by Integrated Governance and Execution.'

Five Concerns, One Door

Under these five problems lies a single pattern. Unit 42 from Palo Alto Networks, which analyzed over 750 incident response cases, found that identification weaknesses played a significant role in almost 90% of investigations, and preventable gaps allowed intrusion in over 90% of hacks. The culprits were limited visibility, inconsistent controls, and excessive trust in user accounts, not exotic exploits.

In July, researchers from Sysdig documented what they assess as the first ransomware operation conducted entirely by an AI agent without human control at every stage. It penetrated through a known vulnerability in an open-source AI tool that had already been patched. None of its techniques were new.

Barnard concludes: 'This is the story of the year in one incident. A new type of attacker going through an old door that someone forgot to close.'

Do Not Hand the Door to a Machine

The same opportunity is now being sold to South African companies in the form of a security product. Buyers are offered fully automated AI penetration testing as a ready-made, cheaper, and continuous solution.

Research does not support this claim. A study published in December 2025 by Stanford University, Carnegie Mellon, and Gray Swan AI saw an AI agent test a live university network consisting of approximately 8000 hosts, alongside 10 professional pentesters. It outperformed nine of them, which is a real result. It also generated more false positives than humans and struggled with anything requiring a graphical interface, finishing in second place. The human took first place.

Barnard notes: 'AI is very good at finding things. We use it every day. However, it does not decide which of the hundreds of discovered issues actually cripple the business, nor does it connect three small vulnerabilities into one path an attacker would choose.'

He advises any South African business evaluating a vendor, including NEWORDER, to ask two questions before signing. Who is the human who confirmed this finding? And can you show us the path from the outside of our business to the actual vulnerability that will prevent us from trading?

'If the answer to the first question is a product name, you bought a scanner,' he says. 'Scanners have their place. Unfortunately, they do not replace a human operator capable of simulating a malicious actor trying to break in.'

Can You Trade on Monday?

The 40% business disruption rate in South Africa points to a question that most boards never answer aloud. If an attack happens tonight, what needs to be operational by Monday for the business to keep earning, and who decides what to restore first?

In Barnard's view, the answer must exist before the incident, be agreed upon by the people who have to live with it, and then tested by someone trying to break it. 'Most recovery plans are written for an auditor. They should be written for the morning after. When the CEO, CFO, and CISO agree in advance on which systems, people, and vendors are necessary for the business to operate, the first hours of an incident are spent on recovery, not debate. This is the speed of gaining understanding when it matters. And a plan that no one has attacked unfortunately remains just a theory.'

One Honest Answer

The five main concerns do not necessarily require five budgets. They need one honest answer to a simple question: have the foundations been tested by someone trying to hack them?

Barnard asks: 'Can your business afford to be hacked? In South Africa, the answer from people making a living measuring risks becomes clearer every year. The good news is that attackers mostly use doors you already know about. Find out which ones are open before someone else does.'

NSE conducts network vulnerability checks amid rising AI-related cyber threats
Read more
business-standard.com

NSE conducts network vulnerability checks amid rising AI-related cyber threats

Ashish Kumar Chauhan, Chief Executive Officer and Managing Director of the National Stock Exchange (NSE), stated on Saturday that NSE is conducting a thorough check of all elements of its network for vulnerabilities due to the increasing threat of artificial intelligence (AI)-based cyberattacks. He strongly urged brokers to enhance their cybersecurity capabilities.

At the annual capital market conference organized by the Association of Members of NSE India (Anmi), Chauhan emphasized that every market participant must make ensuring the integrity of the trading infrastructure across India a primary function.

He warned about the potential emergence of new vulnerabilities in the coming years and called upon the industry association to create a dedicated task force to identify risks, coordinate response measures, and assist market participants in remediation.

Chauhan reported that the exchange is ready to support brokers through seminars and other forms of assistance, and will also collaborate with the regulator to strengthen participant systems. He advised brokers lacking internal technical expertise to either develop it independently or engage external consultants.

Referencing recent AI-driven cyberattack incidents, Chauhan noted that if individual members fail to address vulnerabilities, it could jeopardize the integrity of the broader market network structure. Furthermore, he raised the long-term issue posed by quantum computing, which has the potential to affect cryptographic systems, including those used for secure communication.

Chauhan added that market participants must prepare for these risks concurrently with the immediate threat posed by AI-based attacks. Although technology has always played a central role in the functioning of capital markets since the early days of NSE, market participants cannot afford to fall behind as threats evolve.

In conclusion, Chauhan stressed that maintaining market confidence requires coordinated efforts from exchanges, brokers, and other institutions, and that the exchange will work with industry bodies and the regulator to help the ecosystem overcome these challenges.

Popular