The Sixth Voice of the CISO Data Shows Cyber Risk Has Moved Inside the Workflow
Voice of the CISO 2026 finds cyber risk shifting into AI workflows, as 79% of CISOs name human risk the top vulnerability.
The 2026 Voice of the CISO findings describe a five-year shift of cyber risk into collaboration, SaaS, and AI workflows rather than a simple rise in every metric. Fewer CISOs expect a material attack or report sensitive-data loss than in 2025, but more than half still report material loss and expectations remain above 2022. CISOs calling generative AI a security risk rose from 54% in 2024 to 78% in 2026, while 78% now block or restrict employee GenAI use and 79% say they must manage AI risk without added resources. Human risk or error was named the top vulnerability by 79% in 2026, and 93% of organizations with material data loss said departing employees played a role.
- GenAI seen as a security risk by 78% of CISOs in 2026, up from 54% in 2024.
- 78% of organizations block or restrict employee GenAI tools, up from 59% in 2025.
- 79% of CISOs must govern AI risk without proportional resources or expertise.
- Human risk reached 79% in 2026; departing staff factored into 93% of material losses.
From the original article
7 min read at thehackernews.com
The 2026 findings are not just a year-over-year shift. They mark the latest point in a five-year arc where resilience, AI governance, human risk, and board scrutiny are converging inside the systems where work actually happens. For years, the enterprise cybersecurity story has been told as a straight line of escalation: more attacks, more data loss, more pressure, and more urgency.
thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.