Half of CISOs Consider Quitting as AI Threats and Stress Surge in 2026 Survey

Security leadership roles have become significantly more stressful in recent years, with a majority of professionals reporting heightened pressure. According to the 2026 State of Cybersecurity survey from ISACA, 68% of security leaders state their jobs have grown more stressful over the past five years. This trend coincides with expanding attack surfaces and increasing sophistication in cyber threats.

The primary driver of this stress is the complexity of the modern threat environment. Seventy-one percent of CISOs identify the increasingly complex threat landscape as their main stressor, a figure that rose from 63% in 2025. Advances in artificial intelligence are broadening the scope of security challenges. These technologies introduce novel attacks and complicate governance, particularly as agentic systems come online and AI infrastructure becomes part of the attack surface.

The Impact of Advanced AI Models

The introduction of Mythos-class AI models has created significant anxiety within the security community. A recent survey from Absolute found that 50% of CISOs are considering exiting the profession entirely because of these developments. The rapid growth of AI use in business is impacting the security agenda by presenting new control challenges. Leaders must now address risks associated with AI infrastructure while managing traditional IT security concerns.

Kyle McMillan, chief cybersecurity officer at Siemens USA, notes that security work remains framed around preventing compromise. He emphasizes that there is no single formula for defense that works for every organization. CISOs must understand their specific risk profile, IT environment, and industry-specific threats to formulate unique defense plans. McMillan adds that trade-offs are always necessary when balancing resources against potential risks.

Who Is Affected

The stress and complexity are affecting security leaders across industries as they manage broader governance responsibilities. CISOs are taking on more business risk mandates while trying to thwart attacks and minimize breach damage. Research indicates that preventing compromise remains a struggle for many security teams despite increased focus on resilience and recovery. The volume and velocity of attacks continue to increase year after year, adding to the burden on security staff.

What should you do?

Security leaders must sharpen their strategies and team skills to address these pressing issues. Experts suggest focusing on the specific risk profile of the organization rather than applying generic defenses. Understanding the unique IT environment and industry threats is crucial for effective planning. Teams should prepare for the complexities introduced by AI systems and agentic workflows.

What to do and how to stay safe: ISACA

• Assess your organization's specific risk profile and IT environment to tailor defense strategies.
• Monitor the integration of AI systems and agentic workflows for new governance challenges.
• Review current security controls to ensure they address the broadened attack surface.
• Prepare contingency plans for resilience and recovery in case of successful breaches.

Step-by-step guide: Social Engineering Warning Signs and How to Respond

General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.

Frequently asked questions

What percentage of CISOs are considering leaving their jobs?

According to a survey from Absolute, 50% of CISOs are considering exiting the profession entirely due to Mythos-class AI models.

What is the main stressor for CISOs in 2026?

Seventy-one percent of CISOs cite the increasingly complex threat landscape as their main stressor, up from 63% in 2025.

How has AI impacted the security agenda?

AI advances are introducing novel attacks, broadening the attack surface to include AI infrastructure, and presenting governance challenges.