Executive Summary
According to the report “Cybersecurity 2025: Challenges and Strategies in the AI Era for Large Companies,” commissioned by Microsoft and prepared by Edelman, cloud security and AI-driven cybersecurity solutions are the top investment priorities for Mexican companies in the field of cybersecurity.
Key Findings
- High Risk Perception: 65% of IT specialists consider the current cybersecurity threat level in their companies to be “very high” or “high,” while only 8% classify it as low or very low.
- Limited Investment: Only 13% of organizations report high investment in cybersecurity compared to their overall IT budget; 32% describe it as moderate, and 36% as limited.
- AI as a Double-Edged Sword: While AI facilitates processing and anomaly detection, it also enables more sophisticated cyber threats like personalized phishing campaigns, deepfakes, and automated attacks.
- Top Concerns: 52% of Mexican companies cite malware and ransomware as their primary cybersecurity concerns, followed by phishing and social engineering (32%), cloud security threats (22%), unauthorized use of generative AI tools by employees (20%), and deepfakes (18%).
- Investment Priorities: Cloud security (71%), AI-driven solutions (65%), and threat intelligence (62%) lead investment priorities, while employee training and awareness rank fourth (31%), followed by incident response and endpoint security (22% each).
- Lack of Focus on People: Only 40% of companies consider themselves highly prepared in employee awareness and training, and 36% in AI policy.
- Governance Challenges: 57% of organizations have a formal policy for AI agent use, but 39% admit it’s still developing or informal, and 4% have none.
- Board Involvement: 56% of companies report high board involvement in cybersecurity decisions, but 44% admit only moderate, light, or no involvement.
Key Questions and Answers
- Q: What are the main investment priorities for Mexican companies in cybersecurity?
A: Cloud security and AI-driven solutions are the top priorities, with 71% and 65% of companies investing in these areas, respectively. - Q: How do Mexican companies perceive the cybersecurity threat level?
A: 65% of IT specialists consider the current cybersecurity threat level in their companies to be “very high” or “high.” - Q: Why is there a gap between the perceived risk and investment in cybersecurity?
A: Marcelo Felman, Director of Cybersecurity at Microsoft for Latin America, states that while 65% of IT specialists view cybersecurity as an area of concern, executive-level investment still prioritizes other areas. - Q: What are the primary cybersecurity concerns for Mexican companies?
A: Malware and ransomware are the top concerns, cited by 52% of respondents. - Q: How are AI agents currently being used in Mexican companies?
A: AI agents are widely applied in customer service (66%), cybersecurity (64%), and IT infrastructure (60%). Their use in finance, sales, and human resources is lower but shows high intention for adoption soon. - Q: What percentage of companies have high board involvement in cybersecurity decisions?
A: 56% of companies report high board involvement, but 44% admit only moderate, light, or no involvement.
The report highlights the need for Mexican companies to balance technology investments with a focus on employee training and awareness, as well as addressing governance challenges to effectively tackle the growing cybersecurity threats.
