ISACA Survey Highlights Cybersecurity Workforce Strain and AI Response Gaps

Cybersecurity teams face mounting stress, retention challenges and skills shortages despite stronger executive recognition and business alignment, according to ISACA’s 2026 State of Cybersecurity report. Drawing on nearly 1,900 global respondents, the survey found that half consider cybersecurity underfunded and that staffing shortages remain the greatest obstacle to proper risk assessments. In a Security Magazine column, Pam Nigro warned that these pressures are undermining organizational readiness and cannot be resolved by adding technology alone.

AI adoption is widespread, but preparedness for AI-related incidents remains limited: only 8% of organizations regularly practice AI incident response, and nearly half lack a relevant response playbook. Nigro urged organizations to prioritize sustainable workloads, strengthen interpersonal and problem-solving skills, and conduct practical AI incident exercises. For security leaders, the findings underscore the need to address workforce capacity alongside response plans and exercises.