Global Security Research Report

The AI Speed Tax

AI is expanding faster than security can follow. Businesses describing themselves as AI-first are taking 80 days longer to recover from security incidents than their peers as defences struggle against the emergence of shadow AI, accountability gaps and new AI-driven attacks.

We surveyed 2,000 IT decision makers across 21 regions to understand how they’re responding to today’s greatest cyber threats. This year’s Global Security Report addresses the sprawling influence of AI in detail, containing new trends and approaches that cybersecurity professionals can easily build into their 2026 strategies.

Key findings:

  • AI-first companies take 6.8 months to recover from security incidents, compared to 3.9 months for other businesses.
  • These incidents cost AI-first organizations 135% more than their counterparts and almost half (44%) report that AI was directly exploited in their most recent incident
  • 73% of organizations now put responsibility for breaches down to the CISO

Download the report for the full results broken down by region and sector, the top new threats and investment priorities, analysis of CISO responsibility, solutions for businesses taking on AI-driven change, and more.



"AI tools are going to be privileged parts of your infrastructure, and that's what's going to create risk."

Marshall Erwin

CISO