Most EMEA & Asia Pacific firms lack mature security ops

Logicalis has published research showing that nearly two-thirds of organisations in EMEA and Asia Pacific lack mature 24/7 security operations. The study surveyed 357 IT and security professionals across the two regions.

The findings highlight a gap between cyber security spending and day-to-day operational readiness as organisations face faster attacks and AI-driven response cycles. According to the research, 64% of organisations lack fully mature round-the-clock security operations, while 74% are not making extensive use of security automation.

As a result, many businesses remain exposed to threats that move quickly from vulnerability discovery to exploitation. The research also found that 39% of organisations manage routine security needs well but struggle to respond to new and emerging threats.

Operational gap

The benchmark assessed security maturity across ownership, 24x7 response, visibility, threat detection, incident readiness, and access to external expertise. It focused on what Logicalis described as the core elements of effective security operations.

Ransomware preparedness was another weak point. The research found that 63% of organisations are not fully prepared for ransomware attacks, suggesting many still lack the processes and coordination needed to respond and recover quickly.

The report argues that security maturity now depends less on adding tools and more on how well organisations connect staff, processes, and systems into an operating model that can identify and respond to threats without delay. The issue has become more urgent as AI reshapes both offensive and defensive cyber activity.

Demand for outside support also featured strongly in the survey. Almost nine in 10 organisations, or 87%, said they see a positive or potentially positive role for Managed SOC and MXDR services.

This suggests many organisations are seeking external help to fill skills gaps, maintain continuous coverage, and improve threat intelligence and response times. It also points to managed security services being seen less as optional outsourcing and more as an extension of internal teams.

Roger Loh, Head of Solutions, Digital Transformation, Logicalis Singapore, said, "The findings show that cyber security is no longer simply about deploying more tools. As AI accelerates both cyber attacks and defence strategies, security leaders must focus on building adaptive security operations that combine skilled people, intelligence automation and continuous response."

Regional focus

The research covered respondents across Europe, the Middle East and Africa, and Asia Pacific, offering a snapshot of how organisations in those markets are managing cyber defence. While the data points to continued investment in security, it also suggests many businesses have yet to turn that spending into a consistently mature operating model.

Logicalis is a global technology services provider with operations in more than 30 territories. It reports annualised revenue of USD $1.7 billion and serves more than 10,000 clients across a range of sectors.

Its parent company, Datatec, is listed in Johannesburg and reports revenue of more than USD $3.7 billion. The findings add to broader concerns across the technology sector about whether organisations can keep pace with the speed and complexity of cyber threats as AI tools become more widely used.

Artur Martins, CISO, Logicalis Portugal, said, "The organisations closing the security maturity gap are not necessarily those investing the most, but those connecting people, processes and technology into a coordinated operating model. The research demonstrates that resilience comes from the ability to anticipate, act, recover and learn. For many organisations, trusted managed security services are becoming a critical enabler of that journey."