趋势科技：2026数据驱动视角下的网络风险结构研究报告：攻击压力与暴露面如何塑造攻击损害（英文版）（49页）.pdf

1、A Data-Driven View of Cyber Risk StructureHow Attack Pressure and Exposure Shape DamageMatsukawa BakueiPrincipal Threat Researcher,Forward-Looking Threat Research4Key takeaways5Introduction9Data and methodology14Overall trends in cyber damage23Overview of industry-specific cyber risk38Cyber Risk Pos

2、itioning Map44Conclusion29Organizational differences within the same industry33Principles of cyber risk management revealed by dataTable of Contents3A Data-Driven View of Cyber Risk Structure:How Attack Pressure and Exposure Shape Damage Executive summaryThe central message is clear:cyber risk canno

3、t be understood through any single indicator alone.The findings suggest that observed damage is shaped not only by how much attack pressure an organization faces,but also by how much exposure it has and how effectively harmful activity appears to be detected,contained,and limited once attacks occur.

4、In that sense,cyber risk is better understood not as an isolated score or condition,but as a structured relationship among external pressure,organizational exposure,and the ability to limit harmful outcomes.This study examines how attack pressure,exposure,and observed damage-related activity are ass

5、ociated across 2,014 enterprise-scale organizations worldwide that continuously used TrendAI Vision One Cyber Risk Exposure Management(CREM)and extended detection and response(XDR)throughout 2025.It also considers what those relationships may imply for exposure management and detection and response

6、capability.In this study,Attack Pressure refers to the overall level of observed attack intensity measured by an organizations average Attack Index over the study period.The analysis showed that Attack Pressure had the strongest observed relationship with Damage.At the same time,Exposuredefined in t