AI Adoption in Cybersecurity Surges but Governance Lags, SANS Survey Finds — THE SANS INSTITUTE, LLC

Event summary

AI use in cybersecurity jumped from 50% to 78% in a year, per SANS Institute's 2026 survey of 536 practitioners.
Red teaming AI adoption surged from 33% to 61%, with investigation and response now treated as daily operations.
76% of security teams hold governance roles for enterprise AI, but over half lack formal audit frameworks.
63% report significant AI shortcomings in threat detection, up from 45% in 2025.
95% of respondents believe threat actors are using AI, with 78% experiencing confirmed or suspected attacks.

The big picture

The rapid adoption of AI in cybersecurity outpaces governance and workforce readiness, creating vulnerabilities as adversaries exploit the same technologies. Human expertise remains critical for behavioral detection and oversight, but the gap between policy and practice risks undermining AI's potential benefits. The survey highlights an industry-wide scramble to align infrastructure, controls, and talent with the accelerating pace of AI deployment.

What we're watching

Governance Dynamics: Whether organizations can close the gap between AI governance policies and operational controls, particularly around sensitive-data access.
Threat Evolution: The pace at which adversaries integrate AI across attack life cycles, from reconnaissance to deepfake-driven social engineering.
Workforce Development: How teams balance upskilling existing staff versus hiring new talent to manage AI tools effectively.