ISACA’s new 2026 Tech Trends survey reveals that AI-related cyber threats, ransomware, and compliance risks will dominate the global IT agenda, as organizations struggle to prepare for generative AI challenges.
SCHAUMBURG, Ill. — October 20, 2025 — Artificial intelligence may be transforming industries, but for IT and cybersecurity professionals, it’s also emerging as one of the biggest sources of anxiety. According to ISACA’s newly released 2026 Tech Trends & Priorities Pulse Poll, nearly six in ten digital trust experts (59%) say AI-driven cyber threats and deepfakes will be their top concern heading into next year.
The survey, which gathered responses from 2,963 professionals across cybersecurity, IT audit, risk management, and compliance roles, reveals a growing tension between technological advancement and organizational readiness.
AI Risk Overshadows All Other Threats
As AI adoption accelerates, so does unease over its implications. Forty-one percent of respondents cited “keeping up with AI-driven change” as their biggest professional challenge for 2026, outpacing worries about escalating threat complexity (27%) and talent shortages (23%).
When asked which technologies will have the greatest impact on their work, respondents pointed to AI and machine learning (62%), followed closely by generative AI and large language models (59%), cloud security (40%), and data privacy and sovereignty (30%).
However, only 13% of organizations feel “very prepared” to manage the risks associated with generative AI tools. Half say they are only “somewhat prepared,” while nearly a third admit they are “not very” or “not at all prepared.”
The sense of unease is reflected in the threat outlook as well: AI-powered social engineering attacks top the list of expected cyber risks for 2026 (63%), followed by ransomware and extortion schemes (54%) and insider threats (35%).
“While it can feel daunting, AI should not be viewed solely as a challenge but as an opportunity,” said Pablo Ballarín, founder of Balusian S.L. and a member of ISACA’s Emerging Trends Working Group. “By advancing their skills and governance frameworks, digital trust professionals can use AI to reinforce resilience and rebuild public trust in digital systems.”
Compliance Becomes a Strategic Priority
Beyond cyber threats, regulatory complexity is emerging as another persistent headache for organizations. About one-third (32%) of professionals said global compliance risks will keep them awake at night next year. Yet, most respondents see an upside: 62% believe cybersecurity regulation will help drive business growth, while 78% say it will enhance digital trust.
For 2026, regulatory compliance (66%), business continuity and resilience (62%), and AI risk management (48%) rank as the top three organizational priorities.
Hiring Gaps and the Push for Digital Trust Talent
As demand for cybersecurity and risk professionals surges, companies are struggling to fill roles. Sixty-two percent of organizations plan to hire for digital trust positions in 2026, but nearly half of them (44%) anticipate difficulty finding qualified candidates. Meanwhile, 39% of respondents said their organizations will expand hiring compared with 2025, though 25% expect fewer openings.
Workforce upskilling has become critical: 39% identified data security training as a “very important” area for development next year, reflecting a broader industry shift toward continuous learning and certification.
Five Actions for 2026: ISACA’s Strategic Roadmap
Based on its findings, ISACA outlined five key steps for organizations preparing for an unpredictable 2026:
-
Establish robust AI governance and risk frameworks
Build oversight mechanisms for safe and ethical AI deployment. -
Invest in workforce upskilling and talent pipelines
Support continuous education and cross-functional mobility. -
Modernize legacy systems
Reduce security vulnerabilities by upgrading outdated infrastructure. -
Enhance cyber resilience
Test incident response plans, ransomware recovery, and crisis protocols regularly. -
Prepare for regulatory complexity
Track global compliance changes and invest in specialized tools and frameworks.
“Digital trust professionals face a landscape where technology, threats, and regulation evolve faster than ever,” said Chetan Anand, AVP of Information Security and CISO at Profinch Solutions. “This is the moment to pause, reassess, and invest in the right skills and strategies for the year ahead.”
Training for the Future
To help professionals prepare, ISACA has expanded its suite of AI-related educational offerings, including the Artificial Intelligence Audit Toolkit, AI Fundamentals and AI Governance courses, and new credentials such as the Advanced in AI Audit (AAIA) and Advanced in AI Security Management (AAISM) certifications.
Full survey results and resources, including the Tech Trends and Priorities Pulse Poll infographic, are available on ISACA’s website at www.isaca.org/tech-trends-and-priorities
.
