CISO Role Reaches “Inflexion Point” With Executive-Level Titles

The IANS 2026 State of the CISO Report highlights a structural shift in security leadership, with 46% of North American CISOs now holding executive titles and taking on broader enterprise responsibilities despite constrained resources. Most CISOs still report into IT, but executive-level roles increasingly report to business or risk leaders, revealing a split model: large enterprises elevating security as a core risk function and smaller organizations keeping it within IT. The report warns that expanding scope without commensurate support is making roles less manageable and may drive reactive security postures.