87% of CISOs say pressure in their role has increased over the past year.

73% of U.S. CISOs reported facing a significant cyber incident in the past six months.

78% of CISOs lack a formal strategy for handling AI identities in a zero trust security architecture in 2025.

33% of CISOs rank external threats as their number-one stressor.

The percentage of U.S. Chief Information Security Officers (CISOs) who are very or extremely concerned about losing their job after a major breach decreased from 77% in 2024 to 55% in 2025.

90% of CISOs say their role may be at risk to some degree if a breach were to occur.

58% of CISOs say incidents occurred even though their security tools were in place.

Two-thirds of CISOs report feeling burned out weekly or daily.

13% of CISOs oversee 50 or more security tools.

56% of CISOs say their security tools don’t integrate fully.

CISO confusion about cyber insurance policy coverage for supply-chain attacks decreased from 58% in 2024 to 43% in 2025.

40% of CISOs considered leaving their role altogether.

82% of CISOs feel confident quantifying risk.

57% of CISOs report that half or fewer of their security tools deliver measurable Return on Investment (ROI).

39% of CISOs say they often feel blamed, even when incidents fall outside their direct control.

82% of CISOs say they are under pressure from executives or boards to reduce staff using AI.

59% of CISOs cite agentic AI as their leading near-term threat.

44% of CISOs rank board or executive expectations as their number-one stressor.

17% of CISOs say they always feel personally blamed for security incidents, regardless of the root cause.

Nearly 20% of recent incidents reported by CISOs were already AI-related.