Half of organisations have limited or no formal strategy for managing critical events, leaving them potentially unprepared to respond to cyber attacks, geopolitical disruption and extreme weather, according to a new report from Everbridge.

The company’s 2027 Global Risk & Resilience Outlook, titled Closing the Readiness Gap, identifies the ten most significant risks facing organisations next year and highlights a growing gap between awareness of emerging threats and the ability to respond effectively.

The research found that 77% of leadership teams had been caught off guard by a geopolitical development at least once in the past year, while 24% of organisations never test their business continuity plans. It also highlighted the speed at which cyber threats can escalate, with AI-enabled attacks recording an average breakout time of 29 minutes.

Cyber attacks and systemic cyber risk were ranked as the leading global threat for 2027, followed by geopolitical conflict and geoeconomic confrontation, and natural disasters and climate-driven extremes. The report also examines risks associated with artificial intelligence, supply-chain disruption and misinformation.

Dave Wagner, CEO of Everbridge, said: “The defining challenge for organisations in 2027 isn’t simply identifying the risks ahead. It’s being ready to act when those risks become reality. We’re seeing threats move faster and become more interconnected, yet too many organisations still rely on disconnected processes and plans that haven’t been tested under pressure.”

The report includes recommendations for improving preparedness and coordination, alongside a 90-day roadmap intended to help organisations turn resilience strategies into measurable action.

---