2026 Study from Panorays: 85% of CISOs Can’t See Third-Party Threats Amid Increasing Supply Chain Attacks

Panorays’ 2026 CISO Survey press release highlights widening gaps in third-party cyber risk management: 60% of CISOs report rising third‑party incidents yet only 15% have full supply‑chain visibility, just 21% have tested crisis response plans, and most oversight stops at direct suppliers. The report underscores risks from unmanaged “shadow AI” (only 22% have formal vetting), broad dissatisfaction with traditional GRC tools and static questionnaires, and a pivot toward AI‑driven assessments (adoption up to 66%) to close visibility and scalability gaps across complex software supply chains.