cynomiStateof theVirtua CISO2025How Alis Reshaping Cybersecurity and Compliance ServicesSurveyReport/July2025
cynomiTable of ContentsIntroductionandKeyFndings.MBClintsAreDMlvingHighDamandforvCIS0Services.NStateoftheVirtualCISO2025
cynomiIntroduction andKey Findings
女uynomiIntroduction & MethodologyMETHODOLOGYtorundorsthand howsenvice providersas ervalvingfheir cybarsoculty and complaandadoptingthevCE5OMitualCISO)modalAchamdoosthis, annual roport,highlighingkcay thendkschalengesandopportunitiesfor MSPMSSPs, and cybersecurty consutancies navigating a shiting landscapeTo understandthecuof the vCI9Omarket and how cybersecuitydving. we commissioned asurvey of200Theyar'sdanavilsadoestaysCiS0sanviesas apidymoingina th malnstrom.In1 the US. and Canado, split evenly betwoen MSPandMSSPs Respondentstheldseniorples InchuadingOwmer.CEO,C1O,CISOceremadined conaistentwilthpreviousyeans,raflecting gowlingdemand000,<aiS.,HeadofSecurity,and Seniax SecarityCoesulhantwthallangSMBlclentsformane stfnucturedpnoactive securitysupport and a dearaccolenationparidpantsatthedirectorkevelarabove,curtyconsultingord ina a wider range af cybers eculty and complianceactivlies,tramgiecybersecuritysenices.MSP mesponidents repesenledcompanieswithandconinuouscomplancereadnvessto5;MSSPs had a minimum of10 employeesThe audienceprofileremalinedconsistentwithprevious years. alowing farelia becultyasadrliverThe survey was conducted by Glbbal Sunveyz, an independent research firm,Wealso capbocdnow trtayinths;yarsanvwy, adingasion, on.A and atomationntswererecruitedthraughaglobaldedduingMay2025.Respon5.TheresuftsofforinsightnotB2B research panel and invited via ermalto complete the survey. Mostjustinowhoare the vC15oOmaketstinisioiay.bul intswhore ghosnarity andcomplancevicesare headednectnon-numerical questions wore randomiaed tomitigate order bias inwespanses.
cynomiKey Findings01Demand for VCISO services is growing rapidly across the MSP and MSSP landscapedonand nowreachng 96%.Largae proidesanespedilf liehytoreportstrongderand,with86%ofcompariesres.Ths tondslgraksthatsthuctured,ongaingaoyobersecurltysupportIs bacomhng;astandad client expectation,andservice pravidersthatdebhy mayriskfallng bahind.021h2024,orly/21%ofMSP*sandMSSP*saldtheywere ofeing S0servic.s.Ey20.25,thtnumbersurgedto67%,a319%Increase. This dramaticshiftreflects both risingmadket demand and the fulfilmentoflisstyear'sstated intertibonsined ta launch vClSO senvices by the and of 2025.ORAmona pro,dersanotecurerthyoffering cClNSD services.,560%,pdanto do so bythe and df2025, and another27%aretangating20246.Onhy3%havenoateatalThissgnaladearmaikerdiretion:<ISOIsmovingfroman emargingofferingtoanexpectedpart af anyfullsenvice cybersecurityportidllo.04BarrierstoofferinavClSO servicesare mostly operationalAmang prolderswhohave notyet huncthead vClSO sarvicaes, thetopamasonsandudeconernaboutapritablity(G5%Lhogh nted nvest mont 3%. an d a aockof silled oberscurlty staff32%sl These are rcal chalenaes but heplatform andsupportStateoftheVirtuslCISO2025
cynomiKey Findings05Service providers widely agree that Al willimprove cybersecurit...