Voice of the CISO on securing AI
In our survey of more than 100 North American chief information security officers (CISOs), conducted by TELUS Digital in partnership with the CISO Executive Network, 90% of GenAI adopters reported having at least one solution in production, with 42% running three or more. But how confident are leaders in their ability to secure these systems? Explore what the findings reveal.
As organizations move more AI applications and agents into production, CISOs are responsible for securing an expanding range of systems. Unlike traditional software, AI can behave unpredictably, and changes to models, prompts or connected tools can introduce vulnerabilities even after security testing. With more organizations developing their own AI solutions, CISOs must maintain oversight and confidence in their defenses as these systems evolve.
Drawing on perspectives from security leaders across more than 20 industries who are directly accountable for managing AI security risks within their organizations, the report offers a firsthand look at the state of enterprise AI security in 2026.
This report provides insight on:
- How fast AI is moving: 82% of organizations have already deployed GenAI, while 89% of those that haven’t expect to do so within the next year.
- Where confidence breaks down: CISOs are more confident securing GenAI applications than AI agents, with concerns growing when AI systems have access to sensitive data.
- What policy covers and what it misses: About one in five companies use none of the leading AI-testing frameworks, and roughly one-third don’t block personal AI accounts at work.
- How testing really works: Nearly 60% say AI testing isn’t standardized or varies widely, and 26% run no scheduled testing after launch.
- Where budgets are heading: 74% expect AI safety and security budgets to rise, and more than 90% expect to adopt AI-specific testing tools within a year.
Three reasons to read the research
- 1
Benchmark your AI security approach
Compare your organization's practices with those of other CISOs to identify areas for improvement and build a stronger case for future investment.
- 2
Inform AI development and governance
Understand how enterprise AI adoption is influencing security requirements and use the findings to guide conversations about development practices, policies and controls.
- 3
Plan for what's next
Explore where CISOs expect to increase spending and adopt new security tools. Use their investment priorities to inform your own planning as AI adoption continues to expand.
