The EY Cyber Barometer shows that Italian enterprises are adopting cybersecurity measures at a rate of around 55%, up from 46% in the previous edition. This analysis, undertaken as part of the EY Hub Risk program, examines the digital maturity of over 300 Italian organizations in 2025. This study represents EY's (Ernst & Young) integrated platform in Italy, combining ten areas of risk knowledge into a single, coordinated offering customized to company goals. This data shows that while security controls are now extensively used, they have yet to be aggregated into organized, quantitative models that are integrated into decision-making processes. According to the report, the difference between company size and digital maturity is narrower than in the past, with SMEs accounting for around 46.5% and large enterprises reaching levels around 50%. They maintain an advantage, particularly in more complicated areas like incident management (the ability to avoid, identify, and handle cyber occurrences), monitoring, and operational resilience (the ability to ensure service continuity in the face of unfavorable events). Nonetheless, larger businesses with a turnover of more than €50 million and more than 250 workers show a higher ability to implement specialized controls, monitoring measures, and more robust governance frameworks. Small and medium-sized businesses, on the other hand, are more likely to use incomplete, fragmented, or highly dependent approaches, which has a direct influence on their ability to manage cyber risks in a structured manner over the medium to long term.