94% of cybersecurity and IT leaders at enterprises can translate security risks for non-technical stakeholders

59% of security and engineering teams still negotiate who is responsible for each fix at enterprises.

Average incidents per enterprise in Canada increased from 191 to 342 year-over-year.

51% of organizations in Canada identify AI model monitoring, auditing and assurance tools as a priority.

97% of enterprise leaders expect a material AI-agent–driven security or fraud incident within 12 months.

49% of enterprise leaders anticipate a material AI-agent–driven security or fraud incident within six months.

88% of enterprises have integrated AI into their security stacks

43% of cybersecurity and IT leaders at enterprises admit their remediation processes are still ad hoc

10% of organizations do not track AI-agent risk separately.

Average enterprise cloud downtime per incident increased from 16 days to 20 days.

56% of organizations require proven accuracy and lower false positive rates before deploying AI systems.

Organizations allocate an average of about 6% of security budgets to AI-agent risk.

In 2026, enterprise cloud infection rates reached the highest level ever recorded in the study's history.

20% of IT budgets are now dedicated to security among organizations in Canada.

57% of organizations in Canada report security funding as good or readily available.

45% of organizations in Canada choose identity and access security for AI workloads.

Adoption of SBOMs is 59% in larger enterprises versus nearly 32% in small organizations.

98% of global enterprises say security and data concerns have already slowed deployments, added review steps, or reduced project scope for agentic AI and autonomous systems.

21% of global enterprises cite significant delays or reduced project scope for agentic AI initiatives.

Only 21% of global enterprises say they feel prepared to manage attacks involving agentic AI or autonomous workflows.