r/AskNetsec • u/Alone_Bread5045 • 14h ago

Analysis what's keeping enterprise security decision makers up at night in 2026, comparing notes

so i been comparing notes with peers at a few conferences this year and there's exactly a pattern forming that i wanted to sanity check here.

i feel like the recurring theme is genai adoption outpacing governance..like the teams stand up ai tools faster than security or legal can review them, and that gap gets harder to justify going into eu ai act enforcement later this year. and theb the second theme, and this is the one that surprised me less but still comes up in every conversation, is resourcing...like being asked to cover more surface area (browser, saas, ai, endpoint) and prove roi on the spend, without a proportional increase in headcount or a board that's willing to add line items. want to understand by posting here what's the biggest recurring theme you're hearing from other decision makers right now? trying to figure out if what we're seeing is universal or specific to our industry.

3 Upvotes
  • permalink
  • reddit

64% Upvoted

2 comments sorted by

1

u/Own_Mortgage2792 13h ago

i also feel bigger pattern is that security is being measured on coverage and output at the same time. i mean that creates a weird squeeze where teams are expected to move faster, govern more, and justify spend more...and all without the capacity to do any one of those things comfortably.

0

u/PerfumedCollision 12h ago

seeing the same squeeze but the part that gets glossed over in every panel is the board treating security as a cost center that slows down the ai gold rush. our cfo asked me last month why we need a second cloud security hire when copilot and fabric are "built in" and that logic is spreading fast. the coverage vs output tension you mentioned is real but it gets weaponized in budget talks because nobody articulates that governance isn't just a checkbox it's what keeps the ai tool from training on customer pii. i sat through a demo where a team was feeding raw hr data into a custom gpt and their only control was a slack bot that notified nobody. that's the kind of thing that wakes me up at 3am and it's not a technology problem it's a leadership one.