Evolving CISO Security Priorities Amid AI and Automation Challenges
Chief Information Security Officers (CISOs) are facing an increasingly complex cybersecurity landscape, driven by rapid technological advancements and the proliferation of artificial intelligence (AI) and automation. According to CSO’s 2025 Security Priorities Study, 76% of security leaders report that determining the most suitable security solutions for their organizations has become more complicated. The study also highlights that 57% of organizations have struggled to identify the root causes of security incidents in the past year, underscoring the growing sophistication of cyber threats. CISOs are now responsible for a broader range of duties, including developing cyber strategies, managing risk, and addressing the unique challenges posed by AI-enabled technologies. A significant portion, 67%, must also contend with security issues that extend beyond their local regions, reflecting the global nature of modern cyber risks. Persistent challenges such as employee awareness, budget constraints, talent retention, and process complexity continue to hinder progress. Protecting sensitive and confidential data remains a top priority, with 48% of leaders focusing on this area, followed by securing cloud environments and simplifying IT security infrastructure. The integration of AI into security operations is both a necessity and a challenge, as organizations seek to leverage new tools while managing the risks associated with disruptive technologies. CISOs are increasingly looking to consolidate security tools and maximize the value of existing platforms to stretch limited budgets. The evolving threat landscape, marked by a surge in attack volume and severity, demands that security teams adapt quickly and efficiently. The pressure to scale cybersecurity operations is heightened by high-profile incidents affecting major retailers and manufacturers, resulting in significant financial losses and operational disruptions. The sheer volume of threat intelligence generated by these attacks can overwhelm security operations centers (SOCs), making it difficult to extract actionable insights. As a result, CISOs are prioritizing the development of strategies that enable their teams to respond effectively to both current and emerging threats. The need for robust AI governance frameworks is becoming more apparent, as organizations recognize the importance of establishing clear guidelines for AI deployment and oversight. Security leaders are also focusing on enhancing employee training and awareness to mitigate human-related risks. The complexity of the modern security environment requires a holistic approach that balances technological innovation with sound risk management practices. As CISOs navigate these challenges, collaboration with external partners and the adoption of automation are seen as critical enablers for future resilience. Ultimately, the evolving role of the CISO reflects the broader transformation of cybersecurity from a technical function to a strategic business imperative.
Get ahead of threats like this
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
How this story unfolded
3 events from the most recent confirmed update back to the earliest known activity.
RH-ISAC published its 2026 CISO Benchmark findings
Help Net Security reported RH-ISAC's 2026 benchmark findings showing that CISOs faced growing AI-related operational friction within largely flat budgets and only gradual expected budget growth in 2026. The report said AI had overtaken supply chain risk, vulnerability management, and ransomware as the leading day-to-day challenge for security leaders.
Organizations funded AI security efforts mainly through budget reallocations
During 2025, enterprises expanded AI use in threat detection, reporting, and incident response automation, while most funded these efforts by reallocating existing resources rather than through major budget growth. Many organizations also implemented or partially implemented AI governance policies.
Organizations modestly increased security spending during 2025
According to the 2026 RH-ISAC CISO Benchmark, security spending rose during 2025 to 0.75% of revenue from 0.57%, while average IT spending increased to 3.9% of revenue from 3.2%. Budgets remained tightly managed, with most spending still focused on staffing, compensation, and off-premises software.
Related entities
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
Sources
3 references tracked. Mallory keeps watching after this page renders.
CISOs grapple with AI demands within flat budgets - Help Net Security
helpnetsecurity.com
Open sourceCISOs’ security priorities reveal an augmented cyber agenda
csoonline.com
Open sourceThe Autonomous Shield: Cybersecurity in the Age of Automation and AI
securitysenses.com
Open sourceSee the full picture, correlated to your attack surface.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Related stories
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
CISO Challenges in Managing Cybersecurity Risk Amid AI and Expanding Attack Surfaces
Chief Information Security Officers (CISOs) are facing increasing complexity in managing cybersecurity risk as organizations become more reliant on managed service providers (MSPs), integrate artificial intelligence (AI) into business processes, and contend with expanding attack surfaces. Nearly half of organizations reported a cyberattack or data breach involving a third-party in the past year, highlighting the growing importance of robust vetting and governance processes for service providers. At the same time, the rapid adoption of AI has elevated cybersecurity to a top priority at the board level, with CISOs now expected to communicate risk and strategy more effectively to executive leadership. However, internal conflicts, unclear authority, and misaligned incentives between CISOs and other business leaders are often more damaging to incident response than the cyberattacks themselves, according to recent industry surveys. The threat landscape is intensifying, with a 20% year-on-year increase in high-severity vulnerabilities and attackers leveraging generative AI to exploit both new and old weaknesses. Security teams are under pressure to manage a greater volume of serious issues without corresponding increases in staff or budget, leading to operational strain. Effective vulnerability management now requires clear governance, defined scope, and continuous evaluation, while CISOs must balance technical risk reduction with business alignment and shared responsibility across the organization. As AI accelerates both attack and defense, CISOs are urged to rethink traditional risk management processes and foster stronger leadership alliances to ensure resilient cybersecurity postures.
Mar 21, 2026
Evolving Challenges and Priorities for CISOs in Modern Organizations
Chief Information Security Officers (CISOs) are facing increasing complexity in their roles, with a growing emphasis on both legal liability and the need for innovative, human-centric security strategies. Recent research highlights that while most Fortune 1000 CISOs are protected by directors’ and officers’ (D&O) insurance, only about half of CISOs at midsize organizations receive similar indemnification, exposing them to significant personal legal and financial risks. This lack of protection can deter qualified professionals from accepting CISO roles at smaller firms, even though the cybersecurity risks—such as ransomware, data breaches, and compliance failures—are equally severe across organizations of all sizes. At the same time, CISOs are seeking to transform their function from reactive firefighting to proactive, business-enabling leadership. Leveraging AI to automate routine tasks, they aim to focus on strategic initiatives that unite teams and deliver greater business value. The modern CISO’s priorities include building a strong operational foundation, reducing tactical debt, and fostering a culture where security is seen as an innovation driver rather than just a cost center. This shift reflects a broader trend toward human-led transformation and the integration of advanced technologies to address persistent and emerging threats.
Mar 21, 2026
CISO Risk Management and Security Strategy Challenges in 2025
Chief Information Security Officers (CISOs) are facing unprecedented pressure as cybersecurity threats intensify, regulatory demands increase, and hybrid infrastructure becomes the norm. Despite rising budgets and the adoption of advanced technologies such as AI, CISOs report that risk reduction is not keeping pace with the evolving threat landscape. Studies highlight that hybrid environments, while improving resilience and compliance, introduce operational complexity, visibility gaps, and identity management challenges. Security leaders are increasingly focused on business continuity, regulatory compliance, and the need for rapid incident detection and response, but many feel overwhelmed by the volume of incidents and the expectation of inevitable breaches. The growing complexity of security operations is compounded by the need for better coordination, communication, and leadership readiness. CISOs are under pressure to shrink the gap between detection and investigation, with many expressing concerns about burnout and the potential for nation-state attacks. The integration of AI and automation is reshaping both threats and defenses, but organizations still struggle to translate increased investment into tangible improvements in risk posture. The shift to hybrid infrastructure and the adoption of new security models are driving a fundamental reset in security strategy, making resilience a structural requirement rather than a long-term goal.
Mar 21, 2026