There is an 82-percentage-point gap between AI belief (91%) and AI deployment readiness (9%) in the U.S.

7% of organizations were unable to confirm whether they had been attacked at all in the past year.

52% of global organizations cite legacy infrastructure as a primary blocker to security or AI deployment.

48% of global organizations cite migration complexity as a primary blocker to security or AI deployment.

97% of organizations commit to implementing AI.

57% of organizations report a significant capacity gap in AI security and risk management.

41% of global organizations rank cost as a primary blocker to security or AI deployment.

Capability gaps exist across the AI stack: 57% report gaps in AI security and risk management, 57% in AI operations and monitoring, 54% in cost optimization, and 45% in AI infrastructure expertise.

57% of organizations are upskilling existing staff as the primary response to talent gaps, compared with 49% hiring new technical staff.

More than half of organizations with fewer than 250 employees report having no dedicated security team.

Across the global sample, one in three businesses reported a confirmed cyberattack in the past year.

42% of organizations globally identify a lack of visibility into the AI tools employees use as a significant identity governance gap.

Government entities experienced 32 publicly disclosed ransomware attacks (12%) and the technology sector experienced 28 attacks (11%) in Q1 2026.

Only 9% of U.S. organizations report being ready to deploy AI-powered security today.

Automotive applications faced a 91% attack rate in 2026.

13% of employees say they’ve sold or know someone who has sold company login details – often under the belief it’s harmless

19% of cybersecurity leaders report their organizations have an integrated and culture-embedded approach in place to manage human-related cybersecurity risk.

35% of middle market organizations prioritize broader risk management functions in cybersecurity investment.

58% of cybersecurity leaders report that AI agents are already taking actions within organizational workflows.

52% of organizations report their use of AI is unapproved or ungoverned.