Nathan Whittacre Check availability

The 2026 CEO Technology and Cyber-Readiness Survey

Fourteen questions, and the findings published in the open

Most of what gets said about how executives handle technology risk comes from vendors surveying their own customers. This asks the questions directly, publishes the method alongside the answers, and puts the raw data where anyone can check it.

Findings

Not published yet · 26

No findings yet

The instrument has to be approved and the survey has to run. Nothing is published below the minimum sample — a percentage from a handful of responses is not a finding, and this is the number that would get quoted without checking.

Method

14 questions: 10 scored across 5 categories, and 4 about the company that are recorded but never scored. Respondents answer to get their own result; the aggregate is a by-product they opt into.

  • Only complete responses count. A partial response would bias every question by its position in the instrument.
  • Every figure is published with the number of responses behind it.
  • Any group too small to report is withheld and listed rather than rounded.
  • Shares are whole numbers. A decimal place would claim precision the sample does not support.
  • Self-reported and self-selected. Executives who answer a survey about readiness are not a random sample of executives, and no weighting is applied to pretend otherwise.

Consent

Add my answers to the published findings. My answers are stored without my name or email, grouped with everyone else's, and reported only as aggregates — never as figures small enough to point at one company. I can ask for my response to be removed any time before the findings are published.

That wording appears next to the submit button, not in a policy page linked from a footer. Consent that has to be discovered later is not consent.

Take it

You get your own scored result on screen either way, and joining the published aggregate is a separate checkbox you can leave alone.

Take the survey