CISOs are feeling the security burden of accelerated AI use

A report shows CISOs face increased pressures related to cyber resilience and business continuity.

Chief information security officers are largely expected to ensure the security of AI across the enterprise, but many say they are not receiving adequate support, according to findings from Proofpoint.

85% of CISOs said ensuring the safe use of AI assistants, copilots and automation is a top priority over the two years, according to Proofpoint’s annual Voice of the CISO report. Eight of every 10 CISOs said they are expected to manage AI-related security risks without receiving a proportional increase in resources or expertise.

“CISOs have a significant role to play in securing AI adoption, but they can’t own the risk alone,” Patrick Joyce, global resident CISO at Proofpoint, told Cybersecurity Dive. “AI is being adopted across the business, often faster than traditional governance models can keep up.”

The global survey of 1,600 CISOs highlights important changes in overall risk and the CISO relationship with the C-suite. The survey, conducted by Censuswide, included 100 CISOs at major companies in 16 countries across the globe, from the U.S., the U.K., India, Japan and other countries.

CISOs overall have gained confidence in their organization’s risk posture, however. six out of 10 CISOs expressed concerns a material cyberattack, compared to three-quarters in the 2025 survey. Still, more than half of CISOs fear their organization would be unable to manage a targeted cyberattack.

85% of CISOs said they are largely aligned with their corporate boards on security issues, a significant increase from a year ago, where less than two-thirds of CISOs were aligned. Despite that improvement, nearly 8 of every 10 CISOs said they are facing excessive pressure from their boards on issues ranging from operational disruption and data loss to reputational risk.

“The CISO is increasingly expected to protect the business, enable AI, safeguard data, manage regulatory risk, support business continuity and explain all of that in commercial terms to the board,” Joyce said.

Among the biggest worries for CISOs is employee use of generative AI. A total of 78% of CISOs now consider GenAI a major security risk, representing an 18% increase from the prior year.

86% of CISOs believe their internal security controls provide adequate security protection over risks presented by AI, software-as-a-service and modern work patterns. Despite that confidence, more than 75% of CISOs fear that employees are using AI in a way that could expose sensitive company data.

In addition to the concerns AI, CISOs have larger concerns regarding employee behavior. 8 of every 10 CISOs consider human behavior as the biggest cyber vulnerability within their organization, up from 66% a year ago. Among organizations that experienced a material data loss over the past year, 46% said the loss was related to a malicious or criminal insider.

Company Announcements

Deep Dive Manufacturers fortify cyber defenses in response to dramatic surge in attacks IT/OT convergence and other trends are making the manufacturing industry’s networks more vulnerable and more frequently targeted, but sector leaders are working to improve their cyber posture. By Eric Geller and David Jones • Jan. 29, 2026

Manufacturers fortify cyber defenses in response to dramatic surge in attacks

IT/OT convergence and other trends are making the manufacturing industry’s networks more vulnerable and more frequently targeted, but sector leaders are working to improve their cyber posture.

Deep Dive Auto sector faces historic cyber threats to business continuity A catastrophic cyberattack at Jaguar Land Rover is forcing governments and industrial leaders to address urgent demands for business resilience and accountability. By David Jones • Oct. 16, 2025

Auto sector faces historic cyber threats to business continuity

A catastrophic cyberattack at Jaguar Land Rover is forcing governments and industrial leaders to address urgent demands for business resilience and accountability.

CISOs are feeling the security burden of accelerated AI use By David Jones

New FBI cyber strategy promises increase in adversary disruptions By Eric Geller

Don’t let AI distract from cybersecurity basics, officials and executives warn By Eric Geller

Nvidia’s $12.9B Hugging Face deal could benefit enterprises By Paige Gross