AI Security Spending Jumps as Fear Outpaces Proof of Value
Despite concerns about the actual return on investment, CISOs are significantly increasing their cybersecurity budgets to incorporate AI, driven largely by fear of falling behind competitors and the accelerating pace of AI-powered attacks. Many organizations are prioritizing AI use cases that are popular but not necessarily the most effective, leading to a disconnect between investment and tangible value. The trend is fueled by a sense of urgency due to attackers leveraging AI to enhance their operations, making human defenses inadequate.
CISOs are increasingly allocating significant portions of their cybersecurity budgets to AI, despite ongoing uncertainty about the actual return on investment. A recent survey by IANS and Artico indicated that 69% of CISOs identified AI as their single biggest priority for net new budget dollars, with 24% having created a separate security budget line for it, and another 38% funding it through broader IT or innovation budgets. This shift is largely driven by a fear of being left behind as other organizations rapidly adopt AI and a growing concern about the accelerating pace of AI-enabled attacks.
Data from Gartner suggests a disconnect between the AI use cases organizations are pursuing most aggressively and those delivering the strongest returns. While C-suite leaders frequently identify cybersecurity threat detection and response as the most desired AI application, the most valuable use case is often intelligent IT asset and cost optimization. Functional leaders are frequently falling into the trap of prioritizing “popular” or heavily hyped AI applications over those that generate tangible value.
Several security experts emphasize that measuring the ROI of security investments is inherently challenging, as the primary benefit of a security investment is preventing a data breach or operational disruption – outcomes that don't generate revenue. The market is flooded with new AI-enabled products, some of which will deliver transformative value while others will simply add cost and complexity.
Ultimately, the trend highlights a broader issue: organizations are prioritizing speed and perceived competitiveness over a rigorous, evidence-based approach to AI adoption in cybersecurity. Strong governance, clear accountability, appropriate controls, and measurable business outcomes remain essential to ensure that AI investments deliver true value and don't simply become a costly distraction.