CISOs Must Update Incident Response Playbooks for Multimodal Deepfakes, Gartner Warns

Gartner found 41% of CISOs faced deepfake audio-call attacks and urged updates to incident response playbooks.

At the Gartner Security & Risk Management Summit in London, Gartner published a survey of 297 senior cybersecurity leaders conducted from March to May 2026. Forty-one percent reported at least one deepfake social-engineering incident on an employee audio call in the prior 12 months, and 36% reported one on a video call. Seventy-nine percent reported email phishing, spearphishing, or business email compromise, while 58% reported vishing or smishing. Analyst Craig Porter urged verification-first workflows, phishing-resistant authentication, and incident-response updates for multimodal impersonation and misused AI agents.