The surge in cyberattacks is fuelling heightened anxiety among CISOs, along with a growing willingness to pay ransoms when incidents occur, according to a report from Proofpoint.
Also, the rapid rise of generative AI is forcing security leaders to balance innovation with risk, despite mounting concerns around data exposure and misuse.
These findings are based on a survey that covered over 1,600 CISOs from organisations of 1,000 employees or more across different industries. It was done during the first quarter of 2025.
Across 16 countries, 100 CISOs were interviewed in each market. They were based in the United States, Canada, Brazil, Mexico, the United Kingdom, France, Germany, Italy, Spain, the Netherlands, the United Arab Emirates, Saudi Arabia, Australia, Japan, Singapore, and India.
Findings show that as cyber threats become more frequent and multifaceted, Singapore CISOs are increasingly concerned about their organisation’s ability to withstand a material attack.
Among them, 82% feel at risk of experiencing a material cyberattack in the next 12 months (up from 67% last year). Yet, 53% say they are unprepared to respond.
Also, 91% experienced material data loss in the past year, the second-highest rate among CISOs globally, and a dramatic increase from 32% in 2024.
All CISOs who experienced data loss attributed it to departing employees, up from 63% last year. Reflecting the pressure, 59% of Singapore CISOs say they would consider paying a ransom to prevent data leaks or restore systems.
AI has quickly emerged as both a top priority and a top concern for CISOs. In Singapore, 41% of CISOs say enabling generative AI tool use is a strategic priority over the next two years, even as security worries persist. Half of CISOs express concern over potential customer data loss via public generative AI platforms.
As adoption accelerates, organisations are shifting from restriction to governance, with 53% implementing usage guidelines and 66% exploring AI-powered defences—though enthusiasm has dipped from last year’s high of 86%.
“Artificial intelligence has moved from concept to core, transforming how both defenders and adversaries operate,” said Ryan Kalember, chief strategy officer at Proofpoint.
Kalember said CISOs now face a dual responsibility: harnessing AI to strengthen their security posture while ensuring its ethical and responsible use.
“This balancing act places them at the centre of strategic decision-making,” he said. “But AI is just one of many forces reshaping the CISO role. As threats intensify and environments grow more complex, organisations are reevaluating what cybersecurity leadership really looks like in today’s enterprise.”
