Complexity, skills gaps, and overconfidence threaten cyber resilience, but AI and training could assist to maintain a mature stance, continuous investment and optimization is the way forward Regular practice is key to boosting recovery, but organizations should continuously plan for evolving threats State of recovery: many organizations meet targets, but continued improvement is essential to keep pace with the threat landscape