Cybersecurity breaches have risen to the top of the list of concerns for India Inc, according to a recent report. The FICCI-EY 'Risk Survey', released on Sunday, February 8, 2026, indicates that 51% of India Inc. now consider cybersecurity breaches as the primary risk to their organizational performance. This is closely followed by changing customer demands and expectations, cited by 49% of respondents, and geopolitical events, which concern 48%.
The survey, titled 'Risk outlook – A compass to India's risk landscape', gathered insights from senior leaders across various sectors, analyzing factors impacting pricing, supply chains, talent strategies, and technology investments. The findings emphasize the increasing importance of incorporating risk management into business strategies.
Rajeev Sharma, Chair of the FICCI Committee on Corporate Security and Disaster Risk Reduction, noted that in today's volatile business environment, the ability to anticipate, absorb, and adapt to risk is crucial for sustained growth. The report suggests a shift in how organizations approach risk, moving from episodic treatment to embedding it within strategic decision-making, governance structures, and long-term planning.
The survey highlights the tight link between technology risk and operational continuity. A significant 61% of respondents feel that rapid technological change and digital disruption are affecting their competitive position. An equal percentage identify cyberattacks and data breaches as major financial and reputational threats. Furthermore, 57% report potential data theft and insider fraud as significant risks, while 47% acknowledge the difficulty in addressing increasingly sophisticated cyber threats.
Artificial intelligence (AI) is also identified as a dual risk area. The survey indicates that 60% of respondents believe that inadequate adoption of emerging technologies, including AI, could adversely impact operational effectiveness. Simultaneously, 54% feel that AI-related risks, including ethical and governance issues, are not being effectively managed.
These findings underscore the escalating challenges posed by cyber threats amid India's swift digital transformation. As Indian businesses increasingly adopt online apps, digital payment systems, remote working tools, and AI-based systems, they expose themselves to new vulnerabilities. Cyberattacks are becoming more common and complex, leading to financial losses, reputational damage, identity theft, and disruption of essential services.
In light of these rising threats, businesses are urged to establish robust cybersecurity procedures. Effective measures include using strong, unique passwords, implementing multi-factor authentication, conducting regular security audits, encrypting sensitive data, and providing employee cybersecurity training. Compliance with data protection regulations is also crucial for ensuring greater security.