Cyber risk tops the list as businesses seek greater resilience: new Marsh business risk report reveals shift in priorities

London, UK (May 11, 2026) – According to a new report by Marsh Risk, a business of Marsh, and the world’s leading insurance broker and risk advisor, cyber risk is, for the first time, the top concern among UK business leaders. It is cited as the leading concern for 46% of business leaders, up three percentage points from 2024, and up from 20% in 2023.

Marsh Risk’s UK Business Risk Report – which surveyed more than 2,000 business leaders, from sole traders to businesses of with over 250 employees across the UK – provides industry level insight and practical recommendations to help organizations prioritize actions, allocate capital and engage with insurers more effectively. The report underscores the need for businesses to adopt flexible risk management approaches that can adapt as threats evolve and interact across domains.

The top risks include cyber threats (46%); economic and financial (44%); compliance, legal and regulatory (40%); and people (39%).

According to the report, high profile attacks, greater digitalization and supply chain vulnerabilities have elevated cyber risk to board level, due to widespread operational disruption, potential regulatory exposure and reputational harm. Respondents also highlighted the growing interconnectedness of threats, signalling a move by organizations to prioritize resilience through technology, people and expert guidance.

In response to this, businesses are taking action. Organizations are shifting from siloed risk programs to scenario based planning and integrated frameworks that combine technical controls, people and process. Workforce training, supplier oversight and governance are rising priorities. Increasingly, firms seek specialist advisory support to turn complex data into board level decisions and insurance strategies.

Alistair Brighton, CEO, Corporate & Commercial UK, Marsh Risk, said: “Geopolitical tensions, regulatory change and market volatility are clearly continuing to affect long-term planning for UK businesses. A cyber incident can cause operational downtime, regulatory exposure and reputational harm, while economic or geopolitical shocks can increase cyber and supply chain vulnerability. This interdependence makes siloed risk programs ineffective. Boards want clear metrics, practical scenarios and steps they can take now. They need technical defences, continuous testing, targeted training and robust supplier due diligence that is backed by expert advice.”

About the report

The fifth edition of the Marsh UK Business Risk Report draws on the views and experiences of 2,169 respondents across the UK. The survey was completed by 169 business leaders drawn from Marsh clients and clients of Marsh’s family of businesses (Marsh, Marsh Commercial, Mercer Marsh Benefits, SMEi, Bishop Skinner Marine, and Hamilton Bond), as well as 2,000 leaders from the wider population of UK businesses.

Respondents were questioned between 30 December 2025 and 23 January 2026, and were qualified according to company size, seniority, age, location, industry, and business type.

About Marsh Risk

Marsh Risk is a business of Marsh (NYSE: MRSH), a global leader in risk, reinsurance and capital, people and investments, and management consulting, advising clients in 130 countries. With annual revenue of $27 billion and more than 95,000 colleagues, Marsh helps build the confidence to thrive through the power of perspective. For more information, visit marsh.com.

SOURCE: Marsh

Tags: cyber risk, cyber security, Marsh, priorities, survey, United Kingdom (UK)