RSAC Cybersecurity Insights & Futures, Volume 3, takes a detailed look at CISOs’ priorities for 2025-2026.

For this report, RSAC combined studies of CISOs conducted in Q2 2025 with session attendance and exhibitor visit data from RSAC™ Conference to understand CISOs’ priorities for 2025-2026. Our recommendations for senior cybersecurity leaders include:

• European CISOs who’ve thus far been less concerned about personal liability for breaches should get indemnified now.
• Don’t expect today’s low cybersecurity staff turnover to last.

This RSAC analysis also gives important insight into CISO shopping lists for cybersecurity suppliers. For example, we found that CISOs want to:

• Improve identity management with AI.
• Implement passwordless authentication.