Only 35% of UK organisations believe their existing compliance model is robust enough to cope with growing regulatory demands, despite 85% saying they are prepared for upcoming regulations, according to research by business resilience specialist IO.

The study found that half of cyber security managers believe their organisation is "mostly" prepared but will need to adapt its compliance model, while 15% said significant changes would be required.

The research also found that 33% of respondents believe human oversight remains essential when interpreting complex regulatory requirements. Executive accountability was identified by 26% as a key indicator of compliance resilience, while 22% highlighted experienced human oversight from employees.

Chris Newton-Smith, CEO of IO, said: "New regulations, security incidents and customer requests for assurance are no longer occasional events, they are ongoing tests of an organisation's ability to adapt and respond. The organisations best positioned to respond are those building scalable, adaptable compliance models proactively, rather than being forced to react under pressure.

"The question organisations need to answer is whether compliance is being treated as a project to be managed or a capability to be built. Organisations that have invested in scalable governance structures are generally better positioned to absorb new requirements as they emerge."

---