The Exception Economy: Every Path Forward Has a Cost
New research from Replica Cyber reveals how organizations are handling high-risk work, where they are making consequential tradeoffs, and why exceptions have become ‘business as usual’.
Without secure infrastructure, organizations are forced to pay a price in delays, exposures, workarounds, or projects that never move forward.

This is the Exception Economy.
Teams still need to investigate threats, evaluate tools, test AI, support strategic initiatives, and keep the business moving. But without the right tools in place, there is no clean option, only different costs to absorb.
What we found
Replica Cyber surveyed 200 U.S. cybersecurity leaders to understand how organizations handle sensitive, high-risk work when speed, security, and oversight are all under pressure.
- 100%
- of organizations granted exceptions in the past year
- 39%
- delayed or canceled strategic initiatives
- 46.5%
- proceeded on corporate systems despite concerns
- ~50%
- said sensitive work is happening in environments not built for it
What’s inside
The report breaks down where these tradeoffs are happening, what they are costing organizations, and why leadership often does not see the same reality as the teams doing the work.
- Key data on exceptions, delays, and exposure
- The real cost of waiting, improvising, or pushing ahead
- Practical insight for making fewer, more intentional tradeoffs
- The visibility gap keeping leadership from seeing the real tradeoffs
Thriving in the Exception Economy
Organizations are handling more sensitive, complex, high-risk work than ever: AI evaluations, threat investigations, strategic research, sensitive partnerships, data sharing and more.
Understanding the tradeoffs, seeing where the pressure is mounting, and building infrastructure that supports business speed without creating more blind choices is the difference between managing Exception Economy and being trapped in it.
