The CISO Report 2026

In the second edition of the CISO report, Oxford Economics once again partnered with Splunk to survey 650 Chief Information Security Officers (CISOs), between July and August of 2025 to understand the growing role of the CISO.

Findings reveal a role expanding faster than most can keep pace with, as leaders take on AI governance, secure software development, and mounting personal liability for security incidents. Yet even as threats grow more sophisticated — from AI-generated deepfake phishing to self-mutating malware — CISOs aren’t just playing defense. They’re investing in talent over technology, forging joint accountability with C-suite peers, and pushing to translate technical risk into business language the board can actually act on.

This report invites the reader to uncover how CISOs are navigating the AI paradox, from productivity gains to implementation challenges and risk management. It also surfaces the strategies CISOs are using to prove ROI, bridge the cybersecurity knowledge gap with leadership, and turn security from a cost center into a genuine driver of business resilience.