Two-thirds (65%) of organizations have already deployed AI-enhanced data security capabilities to classify data.

52% of organizations lack a formal AI governance framework.

79% of organizations believe that AI improves code quality.

78% of U.S. CISOs expect AI to create a moderate or significant amount of new IT or security work for their teams due to AI-related security risks and vulnerabilities.

72% of organizations believe that AI leads to faster time to market.

91% of global organizations plan to implement AI in their tech stack this year, representing a 12-percentage-point increase from the previous year.

82% of CISOs say they are under pressure from executives or boards to reduce staff using AI.

78% of organizations believe that AI increases productivity.

97% of organizations are using or piloting AI coding assistants.

100% of organizations confirmed having AI-generated code in their codebases.

30% of organizations state that AI now creates the majority of code in their organizations.

100% of organizations plan to invest more of their budget in AI-related security initiatives in the next 12 months.

83% of global cybersecurity professionals expect AI to benefit cybersecurity more than it will benefit cybercrime in the next three years.

81% of organizations lack full visibility into how and where AI is being used across the software development lifecycle.

45% of cybersecurity professionals in the United States cited phishing as their greatest risk in 2025.

12 working weeks per year are spent on compliance-related tasks, compared to 11 weeks the previous year.

90% of senior legal professionals are expecting an increase in intellectual property infringements in the year ahead

50% of cybersecurity professionals in the United Kingdom identified phishing as the top identity-based threat in 2025.

59% of business and IT leaders warned that AI cyber threats are advancing faster than their security team’s expertise to deal with them in 2025.

16% of cybersecurity professionals in the United States reported that their organizations are fully prepared to handle AI-enhanced attacks in 2025.