Businesses are increasingly exposed to various risks emerging with greater speed and impact. Cyberattacks, extreme weather events, geopolitical instability, and supply chain disruptions test operational continuity and the sustainability of business models.
These increasingly interdependent risks call for a new corporate culture that’s aware, structured, and proactive. In particular, Italian companies are integrating concrete tools into their strategy for the prevention, mitigation, and management of critical issues. This boosts their resilience and strengthens their future competitiveness.
WHAT ARE THE MAIN GLOBAL RISKS FOR BUSINESSES?
Businesses are facing an increasingly complex and interconnected risk landscape. Among the most significant threats are cyberattacks, operational disruptions, and natural disasters. These all reflect trends within global economic and production systems.
According to the World Economic Forum’s Global Risks Report 2025, cyber risk ranks among the top five perceived global risks. Cybercrime activities like data theft, ransomware, and disinformation campaigns are constantly evolving and affect all sectors indiscriminately. The growing sophistication of attacks, alongside the spread of AI-generated content, makes it increasingly difficult to distinguish between authentic and manipulated information. This has potentially devastating impacts on reputation, operational continuity, and data security.
Business interruption is another critical risk. Companies are especially concerned about operational halts caused by cyberattacks or extreme natural events. Even short disruptions can compromise contracts, revenue, and commercial relationships. Increasing geopolitical instability and the fragmentation of global supply chains further heighten corporate vulnerability.
Lastly, climate change continues to emerge as the greatest long-term concern, but also as an immediate reality. Floods, wildfires, heat waves, and storms are rapidly increasing in frequency and intensity. In Italy, the frequency and severity of floods, landslides, droughts, and heatwaves make climate risk something to factor into every strategic assessment. Over the past decade alone, damage from natural disasters in Italy has exceeded €3 billion per year.
THE IMPACT OF CYBERATTACKS ON COMPANIES: WHAT THEY ARE AND HOW TO PROTECT AGAINST THEM
Cybersecurity is now a central concern for all organisations, regardless of size or sector. The growing digitalisation of processes, extensive data use, and integration with external platforms and systems significantly widen the exposure area for attacks.
However, according to the Cyber Index PMI 2024, only 15% of Italian SMEs have reached a sufficient level of maturity to manage risk in a structured way. A further 56% are either unaware or completely unprepared, and 44% of companies acknowledge the risk but fail to intervene effectively.
In 2024 alone, 977 cyber events were recorded in Italy, 405 of which had a confirmed impact. The use of generative AI by cybercriminals has made these attacks more targeted and effective, increasing their potential to damage companies, supply chains, and entire production ecosystems.
The most common types of attacks include:
- Ransomware: Locking company data in exchange for ransom
- Supply chain attacks: Indirect attacks exploiting less-protected suppliers;
- Social engineering: Scams based on psychological manipulation;
- Deepfakes and AI-powered phishing: Manipulated content used to obtain access and data.
The damage is tangible and measurable. According to Clusit, the Italian Association for Information Security, cyberattacks on Italian businesses have increased by 300% over the past five years, with average damages exceeding €300,000 per incident. Moreover, the gap between cybercriminals’ offensive capabilities and companies’ defensive preparedness continues to widen.
Fortunately, Italian SMEs—though still catching up—are showing encouraging signs. In 2024, 31% of companies activated cyber insurance coverage, nearly double the previous year.
