Shifts in Security Budget Allocation Highlight AI's Dominance in Cyber Investment

Security budgets appear to be on the rise, yet many Chief Information Security Officers (CISOs) find their financial realities stagnant. Although the average security budget grew by 5% in 2026, this upsurge masks a troubling statistic: median budget growth remained flat at 0%. A study by IANS and Artico Search, which surveyed over 500 security executives between April and August 2026, reveals a troubling disconnect between expected and actual funding.

While 64% of surveyed CISOs sought budget increases, only 45% achieved this goal. About 55% of CISOs either saw their budgets freeze or face cuts. The potential for growth seems closely intertwined with company performance. Organizations outperforming revenue targets by over 5% were more than twice as likely to receive significant budget increases—41% compared to only 15% for those meeting their targets. More alarming, 22% of companies that underperformed even faced cuts to their security budgets.

Ownership and Sector Influence on Budget Growth

Ownership structure also plays a pivotal role. A strong 71% of VC-backed firms saw their security budgets rise, in stark contrast to just 52% of publicly traded companies. Government and nonprofit sectors lagged markedly, often experiencing the smallest budget increases. When CISOs manage to secure funding, it’s typically not due to major breaches. Rather, business operations or risks were cited by 48% of those who received additional funds. Regulatory pressures and heightened attention from boards contributed to even larger budget hikes, evidenced by averages of 22% and 23% respectively. In stark contrast, only 3% of respondents pointed to breaches as a catalyst for increased funding.

AI's Growing Influence on Security Spending

Despite not always being explicitly allocated as a budget line item, funding for AI has surged, with 69% of CISOs recognizing it as their primary focus for new investment. Steve Martano, an IANS Faculty member, pointed out that investments in AI typically derive funding from broader technology budgets, highlighting a cross-departmental shift in financial allocation. Only 24% of organizations track AI expenditures as separate budget lines. In fact, 38% incorporate AI spending into their overall security budgets, while another 38% are funding it through IT or data channels.

This fragmented budgeting often leads to an underrepresentation of AI funding in security reports. Organizations that do track their AI investments report budget growth 70% of the time—all while only 42% of businesses embedding AI within a general security budget experience similar increases. While AI's presence in security funding is growing, this isn’t leading to immediate job cuts. Around 81% of CISOs expect increased AI adoption to drive demand for new roles and expertise, while 69% predict no reductions in current staffing levels.

Martano emphasized that the integration of AI within security workflows necessitates a reassessment of staffing and hiring. As CISOs increasingly seek professionals who can navigate threats and make decisions beyond AI's current capabilities, it’s clear that AI is reshaping job descriptions rather than merely replacing personnel.

Planning and Leadership in AI Spending

A distinct divide exists between companies planning a significant uptick in AI security funding—identified as aggressive spenders—and those lacking AI-specific allocations. Organizations that invest more than 10% in AI are far more likely to have foundational structures in place to support such initiatives. A notable 79% of these AI-oriented companies report their leadership has a solid grasp of AI risks, compared to just 33% of organizations without AI spending plans. Furthermore, 70% of aggressive AI spenders have defined governance for AI, double the proportion of non-investors.

The trend continues with 50% of aggressive hitters reporting the presence of a mature AI security program, versus a mere 17% in the non-investing group. As organizations that invest more in AI usually allocate greater resources toward overall security, it’s telling that 45% of high AI spenders have also boosted their total security budgets beyond 5%, with projections for another rise in the following year. Conversely, only 12% of those not focusing on AI anticipate similar growth.

CISOs aiming to navigate this budgetary landscape should consider establishing specific budget lines for AI. This approach could help in tracking costs more accurately ahead of future budget cycles, ensuring they secure necessary funding when it counts.