Orgs Face CISO Exodus as AI Risks and Operational Strain Drive Half to Quit
Surveys reveal mounting pressure on security chiefs, with half contemplating an exit amid rising AI risks and operational strain.
Key points
- % of security leaders report increased role stress over the past five years.
- % of CISOs cite the complex threat landscape as their primary stressor.
- % of CISOs are considering leaving the profession due to Mythos-class AI models.
Chief Information Security Officers face unprecedented pressure as artificial intelligence reshapes the threat landscape. Recent data indicates that half of these leaders are contemplating leaving the profession entirely. This surge in occupational stress stems from expanding attack surfaces and the rapid integration of AI into business operations.
What is driving the increased stress among security leaders?
The volume, velocity, and sophistication of cyber attacks continue to rise year on year. According to the 2026 State of Cybersecurity survey from ISACA, 68% of security leaders report that their roles have become more stressful over the past five years. The complexity of managing these threats is the primary driver, with 71% of CISOs citing the increasingly complex threat landscape as their main stressor, up from 63% in 2025.
How is artificial intelligence impacting the security agenda?
Advances in AI are introducing novel attacks and broadening the attack surface to include AI infrastructure. The rapid growth of AI use in business presents governance and security control challenges, particularly as agentic systems come online. According to a recent survey from Absolute, the introduction of Mythos-class AI models has led 50% of CISOs to consider exiting the profession entirely.
What are the core challenges in preventing compromise?
Kyle McMillan, chief cybersecurity officer at Siemens USA, notes that security work remains framed around preventing compromise. He states there is no single formula for the right defence that works for every CISO. Leaders must understand their specific risk profile, IT environment, and industry-specific threats to formulate a unique plan of defence based on available resources.
What steps should organisations take to address these issues?
Security leaders must sharpen their strategies and their teams’ skills to tackle this intense environment. This involves addressing the seven biggest issues CISOs face, with a focus on resilience and recovery. Organisations should ensure their defence plans are tailored to their specific risk profiles and resource constraints, rather than relying on generic solutions.
What to do and how to stay safe: ISACA
- Review your organisation’s specific risk profile and IT environment to tailor defence strategies.
- Assess the governance and security controls for any AI infrastructure or agentic systems in use.
- Focus on resilience and recovery planning alongside prevention efforts.
- Monitor the evolving threat landscape for novel AI-driven attacks and adjust controls accordingly.
Step-by-step guide: Spot Business Email Compromise: Hidden Signs and Immediate Response
General security guidance from the Phish Herald newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
What percentage of security leaders report increased stress over the past five years?
According to the 2026 State of Cybersecurity survey from ISACA, 68% of security leaders report that their roles have become more stressful.
What is the main stressor for CISOs according to the ISACA survey?
71% of CISOs cite the increasingly complex threat landscape as their main stressor, up from 63% in 2025.
How many CISOs are considering leaving the profession due to AI models?
According to a recent survey from Absolute, 50% of CISOs are considering exiting the profession entirely due to the introduction of Mythos-class AI models.
