CISO Budget Dynamics: AI Investment Rising Amid Stagnant Security Spending

Security budgets are on the rise, but for a significant number of Chief Information Security Officers (CISOs), actual funding isn't reflecting this growth. According to the IANS and Artico Search 2026 Security Budget report, average budgets increased by 5% this year, up from 4% last year. However, the median budget growth remains static at 0%. A striking 64% of CISOs sought budget increases during this cycle, yet only 45% succeeded, revealing that over half faced either stagnant or reduced budgets.

This disparity in budget allocation appears closely tied to business performance. Companies surpassing revenue goals by over 5% were more than twice as likely to secure double-digit budget increases in security spending—41% versus just 15% for those merely meeting their targets. Notably, 22% of organizations falling short of expectations slashed their security budgets entirely.

Ownership structures further influence budget dynamics. A considerable 71% of venture capital-backed firms reported security budget increases, compared to only 52% of publicly traded companies. Conversely, government and nonprofit entities consistently noted the smallest growth rates in their security budgets.

Risks and Realities: The Drivers Behind Budget Changes

Interestingly, when CISOs do gain additional funding, the reasons often diverge from common assumptions. Instead of major breaches prompting financial bolstering, operational or business risk is the primary reason for budget increases, mentioned by 48% of increased budgets. New regulatory demands and heightened executive scrutiny also contributed to substantial average increases of 22% and 23%, respectively. Only 3% cited significant breaches as a catalyst for securing more funds.

AI Takes the Lead in Security Investments

Amidst these financial shifts, AI has emerged as the primary focus for new security expenditures. A notable 69% of CISOs labeled AI as their top new priority. These trends indicate that security departments are increasingly drawing funds from broader AI and technology budgets, as articulated by Steve Martano from IANS. He noted that security capabilities are increasingly funded from budgets that are not explicitly earmarked for security expenses.

Only 24% of organizations maintain a distinct budget line for AI within their security expenditures. Interestingly, 38% incorporate AI funding into their overall security budget, while another 38% receive AI funding from IT, data, or innovation budgets. The lack of clarity in accounting practices tends to obscure the true allocation toward AI security, as companies rigorously tracking AI expenditures reported funding increases nearly 70% of the time, in contrast to 42% where AI is absorbed into general security budgets and just 31% for those relying on other funding sources.

However, the rising tide of AI investments in security doesn’t equate to decreasing personnel needs. A significant 81% of CISOs anticipate AI will create demand for new roles and skill sets, with 69% expecting current staff levels to remain stable. Martano emphasizes that as AI and automation reshape workflows, existing team members are often repurposed to tackle threats requiring human judgment, highlighting a shift in hiring and resource allocation.

Expenditure Insights and Future Considerations

Divergent attitudes about AI security budgeting also suggest a distinction between organizations planning aggressive AI investments and those with no intentions toward AI-specific spending. Organizations aiming to increase AI-related security spending by over 10% were found to possess stronger organizational foundations. About 79% of these aggressive spenders reported leadership possessing a reasonable understanding of AI risks, as opposed to only 33% among companies with no dedicated AI investment plans. Furthermore, 50% of the proactive AI-budget contenders indicated they have established mature AI security frameworks, compared to a mere 17% among those not investing in AI.

The correlation between overall security spending and AI investment cannot be overlooked. A substantial 45% of aggressive AI spenders noted that their overall security budgets rose by over 5%, with a majority expecting continued growth next year. On the flip side, just 12% of those not prioritizing AI saw similar increases, with only 9% forecasting growth for the next cycle.

For CISOs eager to align with these shifting spending trends, the report suggests explicitly designating a budget line for AI and diligently tracking associated costs to enhance preparation for future budget negotiations.