CISOs Face Growing AI Security Risks Amid Improving Cyber Resilience

The 2026 Voice of the CISO report by Proofpoint reveals a decline in perceived risk of material cyberattacks among CISOs, dropping from 76% in 2025 to 61% in 2026. However, human risk has risen, with 79% of CISOs identifying it as the biggest vulnerability. Concerns regarding AI security have surged, with 78% of CISOs viewing generative AI as a significant risk, an increase of 18 percentage points from the previous year. Despite the improved outlook, CISOs are expected to manage AI-related risks without proportional increases in resources. The IANS AI Security Survey indicates that 41% of CISOs feel optimistic about managing AI security risks over the next two years, driven by organizational readiness factors. Key factors influencing this optimism include leadership understanding of AI risks and effective governance. The dual challenge of securing AI while enabling its use is becoming a defining aspect of the CISO role.

Key Points: • 61% of CISOs believe their organization is at risk of a material cyberattack, down from 76% in 2025. • 79% of CISOs now identify human risk as their organization’s biggest cyber vulnerability. • 78% of CISOs view generative AI as a significant security risk, with many expected to manage it without additional resources.