36% of CNI organisations reported increasing cyber budgets in response to an incident

57% of organizations in Canada report security funding as good or readily available.

48% of businesses say the CEO now makes the final decision on cyber budgets.

The dominant investment priorities for midmarket organizations are AI and automation (49%) and adding new solutions (33%).

91% of security leaders report that recent high-profile ransomware incidents are moderately or significantly influencing their buying decisions.

55% of organizations are cutting or not increasing investment in red and purple teaming.

80% of organizations increased cybersecurity budgets in 2026.

59% of organizations are increasing spending on cloud and third-party security.

64% of U.S.-based cybersecurity leaders report sufficient budget for AI.

89% of midmarket security leaders report increasing budgets.

52% of organizations are cutting or not increasing investment in identity access management controls and zero-trust architecture.

44% of organizations identify AI as the top driver of cybersecurity budget increases.

44% of organizations would cut AI investment first if cybersecurity budgets tightened.

70% expect insider risk budgets to rise again in 2026, with 28% anticipating increases of 10% or more.

30% of companies dedicate specific budgets to AI security.

64% increased insider risk budgets in 2025, yet 45% still view funding as insufficient.

95% of organizations are increasing cybersecurity budgets in 2026.

56% of organizations invest in agentic discoverability, 55% invest in API security, and 54% invest in web application firewalls.

74% of organizations are seeing double-digit cybersecurity budget growth in 2026.

46% of internal audit leaders cite limited financial budget as a barrier to AI-specific risk management efforts.