Only 43% of cybersecurity functions are meaningfully involved in helping other functions adopt AI.

73% of the study's cohort of "Secure Creators" (organizations with more advanced cybersecurity functions than their peers) believe their ability to add value will grow in the future.

23% of study respondents completed a technology rationalization effort in the last two years.

Almost half (48%) of security professionals are falling behind global SBOM compliance regulations.

GPT4 can write exploits for 87% of known vulnerabilities.

56% of decision-makers at financial institutions named false positives as the leading pain point in fraud operations.

Cybersecurity contributes 11% to 20% in value to each enterprise-wide strategic initiative it is involved in.

41% of respondents are undertaking a technology rationalization effort.

75% of financial institutions say fraudsters outpace defenders with generative AI.

26% of security professionals said AI code generation and vibe coding risks were the most pressing or high-stakes issue AI creates for organizations today.

96% of tech professionals view AI agents as a growing security risk.

72% of respondents state AI agents pose a greater risk than machine identities.

60% of respondents say AI agent's ability to access privileged data is a factor contributing to AI agents as a security risk.

68.8% of decision-makers at financial institutions rank first-party fraud as their second-greatest challenge.

Only 13% of CISOs in the study said they were consulted early when urgent strategic decisions were being made.

41% of respondents are in the process of simplifying their tech platform.

98% of organizations plan to expand their adoption of AI agents.

95% of software weaknesses are directly attributable to open-source code.

"Secure Creators" (organizations with more advanced cybersecurity functions than their peers) require smaller budgets — 10% smaller on average — and are less likely to cite budgets as a key challenge.

74% of respondents reported they invested savings from optimization, automation, and outsourcing to address control weakness.