The CISO Outlook 2026
Authentic intelligence in the age of AI
As AI adoption accelerates, so does the complexity of enterprise cyber risk. While organizations increasingly rely on AI to strengthen monitoring, detection, and threat response, cybercriminals are also using it to launch more sophisticated attacks, impersonation schemes, and domain-based threats.
CSC’s research report explores how chief information security officers (CISOs) and senior technology leaders are managing escalating cybersecurity risks, strengthening governance frameworks, and balancing AI-driven opportunity with operational and regulatory complexity.
Download this resource
All fields marked with * are required.
Based on a global survey of 300 senior technology and cybersecurity executives, including CISOs, chief technology officers (CTOs), chief information officers (CIOs), and heads of cybersecurity, The CISO Outlook 2026 provides a data-driven view of how organizations manage cybersecurity risk in an increasingly AI-driven environment. Respondents were surveyed in early 2026 and are evenly split across North America; Europe including the U.K. and the Asia-Pacific region.
The report explores the cybersecurity threats organizations face today, including domain and domain name system (DNS) hijacking, cybersquatting, ransomware, social media impersonation, and deepfake-related fraud. It also examines how organizations approach AI governance, supply chain risk, DNS resilience, and evolving regulatory requirements as cyber threats continue to grow in scale and complexity.
What you'll discover
Cyber threats are becoming harder to manage
Organizations face increasing pressure to protect digital infrastructure, domains, and online channels against a growing range of cyber threats.
-
Nearly three-quarters (72%) of CISOs and senior technology leaders describe the level of threats facing their organization as “critical” or “very critical.”
-
Domain and DNS hijacking and subdomain takeover attacks ranked as the top cyber threat identified by CISOs and technology leaders.
-
Almost nine in 10 (89%) senior C-level executives expect cybersecurity incidents to increase over the next 12 months.
AI is creating new security and governance risks
Cybersecurity leaders are balancing the benefits of AI-driven monitoring and threat detection with growing concerns around governance, oversight, and data exposure.
-
Almost all CISOs and senior technology leaders (98%) express concern about giving third-party AI systems access to company data.
-
AI-powered domain generation algorithms (DGAs) are viewed as a cybersecurity threat by 86% of organizations surveyed.
-
Nearly three-quarters (72%) say AI-driven automation plays a protective role with DNS and similar attacks but requires oversight or careful management.
Supply chain, resilience, and regulatory pressure are increasing
Third-party ecosystems, DNS resilience, and evolving regulation continue to create operational and compliance challenges for cybersecurity leaders.
-
Seven in 10 organizations (70%) apply cybersecurity risk controls only to key suppliers.
-
Only 14% of CISOs and senior technology leaders say they are “very confident” in their organization’s ability to mitigate domain attacks.
-
Just 15% of organizations report full compliance with all NIS2 requirements.
Our experts
Chief Technology Officer, CSC
Global Director, Security Services, CSC
Global Domain Product Manager, CSC