CISO Report Highlights Rising AI Security Concerns Amid Enhanced Cyber Resilience
A recent report from Proofpoint, Inc., a recognized leader in human and agent cybersecurity, has shed light on evolving cybersecurity challenges faced by Chief Information Security Officers (CISOs) worldwide. Released on September 9, 2026, the "2026 Voice of the CISO" report indicates a significant rise in concerns regarding generative AI security, revealing an 18-point increase, bringing this figure to 78%. This uptick reflects the growing responsibilities of CISOs as they navigate the complexities of modern digital landscapes.
The report, which involved a comprehensive survey of 1,600 CISOs across 16 countries, reveals a mixed picture of progress in cybersecurity. Encouragingly, the percentage of global CISOs who perceive their organizations as at risk of a significant cyberattack in the coming year has decreased from 76% in 2025 to 61% in 2026. Additionally, instances of material data loss have declined, falling from 66% the previous year to 53%. This suggests a positive trajectory in cyber resilience among enterprises; however, the situation is far from straightforward.
Human risk has been identified as the prominent vulnerability within organizations, with 79% of CISOs recognizing it as their greatest cybersecurity weakness, a notable jump from 66% in 2025. As organizations increasingly integrate AI technologies, the responsibilities of CISOs have expanded. The report highlights that while a majority of CISOs are tasked with managing risks associated with AI—especially in the context of using AI assistants, copilots, and automation—only a fraction foresee an increase in resources or expertise to tackle this challenge effectively.
Patrick Joyce, the global resident CISO at Proofpoint, emphasized the changing nature of the CISO’s mandate, stating, “Security leaders are being asked to do two things at once: protect the business from technology risk and help it embrace transformative technology safely and rapidly.” With AI tools becoming integral to daily business operations, the pressure is mounting on CISOs to facilitate innovation while safeguarding sensitive data and essential workflows. This dual responsibility is increasingly viewed as a defining challenge of the role.
Notably, the report outlines several key findings relevant to the evolving landscape of cybersecurity:
-
Emphasis on Securing AI: A noteworthy 85% of CISOs prioritize enabling the secure use of AI technologies over the next two years. However, a staggering 79% are expected to manage the risks associated with AI without a corresponding increase in resources or support.
-
Improved Cyber Resilience: Although there’s been a decline in the expectation of a material cyberattack, with 56% of CISOs admitting their organizations are still ill-prepared to face targeted attacks, the risk has not diminished. The risks now extend to everyday technologies, including collaboration platforms, AI assistants, and cloud storage options, underscoring the evolving nature of cyber threats.
-
Human Behavior as a Major Risk: With 79% of CISOs pointing to human behavior as the greatest cybersecurity risk, the internal environment remains a significant concern. Factors such as malicious insiders and careless employees contribute to the vulnerability landscape, making it essential for organizations to promote a culture of cybersecurity awareness.
-
Consequences of Data Loss: While fewer organizations are reporting material data loss, the fallout from such incidents has become more severe. Regulatory penalties have seen an uptick, as have financial losses and costs associated with recovery, highlighting that the stakes continue to rise despite declining instances of data loss.
-
Employee Trust Issues: Interestingly, while a substantial majority of CISOs express confidence in their security measures, there exists a pervasive worry regarding employees’ usage of AI tools. Over three-quarters of CISOs are apprehensive about possible customer data breaches due to public AI tools and have taken measures to restrict employee access to these platforms.
- Increased Board Engagement: There is a notable convergence between CISOs and their boards regarding cybersecurity strategies. Approximately 85% of CISOs report alignment with their boards on cyber risks, yet this has led to mounting pressures. Boards are increasingly assessing cybersecurity through a commercial lens, considering its impact on enterprise value and overall business continuity.
Despite the advancements in cyber resilience, Patrick Joyce remains cautious, emphasizing that while improvements are evident, the risk environment is becoming increasingly intricate. He states, “Risk is increasingly tied to how people, data, applications, and AI interact every day.” The findings from the report clearly indicate that sustained advancements in cybersecurity strategies are critical as organizations adapt to emerging technologies and shifting risks.
The full "2026 Voice of the CISO" report is available for download, providing in-depth insights into the state of cybersecurity and the challenges confronting CISOs today.
For more details, interested parties can visit Proofpoint’s official report page.
As organizations continue to navigate the complexities of cyber threats, the insights from the report can serve as a valuable resource for security leaders striving to fortify their defenses in a rapidly changing digital environment.