14 Nov Cybersecurity Lessons For Leaders: Designing Resilience at Scale
This week in cybersecurity from the editors at Cybercrime Magazine
Sausalito, Calif. – Nov. 14, 2025
– Read the full story in Forbes
“As an AI entrepreneur and cybersecurity leader, I’ve watched compliance frameworks struggle to keep pace with modern threats,” writes Nishant Sonkar, Global Cloud Compliance Lead at Cisco, in a Forbes article.
Recent research shows that:
Ninety-eight percent of organizations have at least one third‑party vendor that has suffered a data breach. Attackers often compromise suppliers first and move laterally into larger enterprises.
At least 35.5 percent of data breaches in 2024 originated from third‑party compromises, up 6.5 percentage points from 2023.
Seventy-two percent of data breaches involve data stored in the cloud, and 30 percent span multiple environments.
According to IBM, the average cost of a breach reached $4.88 million in 2024.
According to Cybersecurity Ventures (via Cybercrime Magazine), by 2025, the global cost of cybercrime is projected to hit $10.5 trillion.
These numbers illustrate why passing an audit isn’t enough. In a cloud‑first, vendor‑heavy world, governance must be embedded into architecture, automation and accountability. Checklists alone cannot prevent breaches in a live environment.
For Sonkar, his own Common Control Framework (CCF) overhaul at Cisco was about designing resilience at scale. He believes that leaders who view governance as a dynamic capability will not only pass audits but also prevent crises before they occur.
Cybercrime Magazine is Page ONE for Cybersecurity. Go to any of our sections to read the latest:
- SCAM. The latest schemes, frauds, and social engineering attacks being launched on consumers globally.
- NEWS. Breaking coverage on cyberattacks and data breaches, and the most recent privacy and security stories.
- HACK. Another organization gets hacked every day. We tell you who, what, where, when, and why.
- VC. Cybersecurity venture capital deal flow with the latest investment activity from various sources around the world.
- M&A. Cybersecurity mergers and acquisitions including big tech, pure cyber, product vendors and professional services.
- BLOG. What’s happening at Cybercrime Magazine. Plus the stories that don’t make headlines (but maybe they should).
- PRESS. Cybersecurity industry news and press releases in real time from the editors at Business Wire.
- PODCAST. New episodes daily on the Cybercrime Magazine Podcast feature victims, law enforcement, vendors, and cybersecurity experts.
- RADIO. Tune into WCYB Digital Radio at Cybercrime.Radio, the first and only round-the-clock internet radio station devoted to cybersecurity.
Contact us to send story tips, feedback and suggestions, and for sponsorship opportunities and custom media productions.
