EY helps clients create long-term value for all stakeholders. Enabled by data and technology, our services and solutions provide trust through assurance and help clients transform, grow and operate.
At EY, our purpose is building a better working world. The insights and services we provide help to create long-term value for clients, people and society, and to build trust in the capital markets.
Evaluate your organisation’s ability to prevent, detect, contain and respond to threats.
The EY Cybersecurity Benchmarking Assessment is a structured cyber maturity benchmarking assessment that helps organisations evaluate cybersecurity capabilities across 24 domains, benchmark performance against peers, and identify priority areas for improvement.
The EY Cybersecurity Benchmarking Assessment tool helps drive more value from your cybersecurity function by identifying its strengths, weaknesses and areas for investment.
Make informed decisions
Provides data-driven insights for strategic planning and resource allocation across your cybersecurity function
Improve cost efficiency
Optimises cybersecurity investments by identifying areas for improvement and reducing unnecessary expenditures
Current and future state analysis
Identify strengths and gaps across multiple critical domains within cybersecurity for a clear visualisation of your current cybersecurity posture and to help build a roadmap for future value creation.
Benchmarking
Compare your cybersecurity function with industry peers to guide decisions and prepare your organisation for the challenges of tomorrow.
Detailed reports
Receive a comprehensive cybersecurity benchmarking report that equips you for strategic planning and clear road mapping for future value creation.
EY Cybersecurity Assessment Tool FAQs
The EY Cybersecurity Benchmarking Assessment is a structured cyber maturity assessment designed to help organisations evaluate and benchmark cybersecurity capabilities across 24 domains. The assessment covers areas including governance, risk management, resilience, cloud security, identity and access management, threat intelligence and incident response. It provides a rapid, benchmarked view of current maturity against peer organisations and leading practices.
The assessment compares your organisation’s cyber maturity against aggregated peer benchmarks based on industry, geography and organisational profile. The output includes comparisons against peer averages and highlights where capabilities may be above, aligned with or below industry benchmarks across key cybersecurity domains.
Organisations will receive a detailed output report that includes overall cyber maturity scoring, domain-level benchmarking across 24 areas, peer comparisons, maturity stage mapping and identified areas of strength and exposure. The report also highlights top and bottom performing domains to help prioritise cybersecurity improvement efforts.
Yes. The assessment is designed to support organisations across a wide range of industries, geographies and operating models. Benchmark comparisons are contextualised using industry and organisational peer data to provide relevant and meaningful maturity insights.
The assessment helps organisations identify areas where cyber maturity may lag behind peers or leading practices. By highlighting exposure areas across key domains, the results can support more informed prioritisation of cybersecurity investments, governance improvements and resilience initiatives.
Cybersecurity benchmarking should be performed regularly to help organisations adapt to evolving threat environments, emerging technologies and changing business risks. Ongoing benchmarking supports continuous improvement and resilience planning.
The assessment uses EY’s cyber maturity framework to evaluate organisational capabilities across maturity stages ranging from Initial and Managed through to Quantitatively Managed and Optimising.
Yes. Cybersecurity benchmarking can help support board and executive reporting by providing structured maturity insights, peer comparisons and visibility into cybersecurity strengths, gaps and improvement priorities.
The assessment is designed to provide a rapid yet informative snapshot of cyber maturity through a streamlined questionnaire focused on key cybersecurity indicators.
Take our assessment
Strengthen your cybersecurity function with an automated benchmarking assessment based on leading EY practices and receive your personal output report.
