Splunk

Organizations spend a median of $24.5 million annually on AI tools that prevent and respond to downtime.

Organizations experience an average 3.4% drop in stock price following a downtime event.

The average cost of downtime for organizations is $15,000 per minute.

Tool fatigue is a leading stressor for security teams (79%).

False alerts are a leading stressor for security teams (94%).

92% of CISOs say that improving threat detection and response capabilities is a top priority.

31% of SOCs are using GenAI for Querying security data.

43% of respondents face unrealistic expectations by leadership.

59% of respondents say tool maintenance is the main source of inefficiency.

CISOs with healthy board relationships report stronger partnerships with IT operations (82% versus 69% of other CISOs) and engineering (74% versus 63% of other CISOs).

When asked what skills CISOs should develop, the biggest gaps in importance include business acumen (55% for boards versus 40% for CISOs), emotional intelligence (45% for boards versus 35% for CISOs) and communication (52% for boards versus 47% for CISOs).

60% of board members acknowledge that board members with cybersecurity backgrounds more heavily influence security decisions.

Downtime costs an organization $95 million in lost revenue annually, nearly double the level in 2024.

71% of technology executives rate publicly disclosing a data breach as very or prohibitively disruptive, up from 23% in 2024.

90% of tech leaders report increased demand for customer support during downtime.

65% of technology leaders invest in AI-powered observability to gain deeper, real-time insights into their digital ecosystems.

85% of technology leaders prioritize AI-driven security automation.

Aggregate unplanned downtime costs for Global 2000 companies total $600 billion annually, representing a 50% increase in two years.

89% of tech leaders cite the need for large numbers of personnel to fix downtime issues.

Nearly 20% of marketing professionals report it takes an entire quarter to recover brand health after remediation.

56% of security leaders now experience cybersecurity-related downtime caused by SaaS and other third-party application issues often or very often, nearly triple the rate in 2024.

66% of ITOps and engineering leaders are prioritizing investments in automation to mitigate the risks of human error.

81% of technology leaders cite customer loss as a consequence of downtime.

About three-fourths of ITOps and engineering leaders identify end-to-end observability as their top investment priority to improve infrastructure resilience.

98% of organizations with the lowest downtime costs confirm end-to-end visibility is very or extremely important for reducing incidents.

68% of technology leaders express concern that their AI agents will behave unpredictably.

All technology leaders report their organization has experienced some form of AI-related downtime.

47% of technology leaders report that customers are often or very often the first to detect service degradation or outages.

Ransomware payouts now average $40 million, nearly triple their level in 2024.

Regulatory fines average $51 million per organization.

57% of technology executives view regulatory fines as very or prohibitively disruptive.

36% of security leaders say downtime is often or very often misclassified as an IT issue.

Only 38% of technology executives consistently identify the root cause of a downtime incident.

68% of CISOs prioritize investing in AI cybersecurity capabilities.

82% of CISOs worry agentic AI will increase deployment speed and the complexity of persistence mechanisms.

Joint accountability drives the most value for key security initiatives (62%).

Joint accountability drives the most value for security budget and funding (55%).

Joint accountability drives the most value for access to security-relevant data (49%).

High alert volumes are a leading stressor for security teams (98%).

More than four out of five CISOs oversee secure software development (DevSecOps).

Lack of shared data views is a barrier to cross-departmental data sharing (70%).

Data privacy concerns are a top barrier to cross-departmental data sharing (91%).

86% of CISOs fear agentic AI will increase the sophistication of social engineering attacks.

Nearly all CISOs now report that their responsibilities include AI governance and risk management.

More than three quarters of CISOs are now worried about personal liability for security incidents, a sharp jump from last year when just over half expressed similar fears.

39% of CISOs who have partially or fully adopted agentic AI strongly agree it has increased their teams' reporting speed, which is more than double the 18% among CISOs who are still exploring agentic AI.

92% of CISOs say AI enables their teams to review more security events.

95% of Chief Information Security Officers (CISOs) cite the growing sophistication of threat actor capabilities as their greatest risk.

Nearly two-thirds of security teams experience moderate to significant burnout.

Nearly four out of five CISOs report their role has become significantly more complex.