Chief information security officers (CISOs) operate in a much riskier world than they did just a few years ago. The variety of corporate security threats has grown, along with the frequency and costs of cyberattacks to organizations of all sizes and industries.

Compounding CISOs’ misery, digital transformation, expanding supply chains, and the push for innovation have added to remote work to expand every organization’s attack surface.

How prepared are companies to manage such risks? A new ThoughtLab global survey, co-sponsored by ServiceNow, asked 1,200 executives in 14 economic sectors to evaluate the cybersecurity challenges they face, and the progress they’re making in response. Here are some highlights: