Nearly two-thirds of risk leaders reported that their budgets have not changed at all this year.

Only 15% of companies globally have a budget specifically directed at mitigating AI-related risks in 2025, which is about the same percentage as last year.

A functional department leader, such as a head of SecOps, at a Fortune 500-size company earns an average annual cash compensation of $307,000.

The average annual cash compensation for a functional department leader (such as a head of SecOps) at large security organizations is $247,000.

The average annual cash compensation for a functional department leader (such as a head of SecOps) at a Fortune 500-size company is about 25% higher than for the same role at large security organizations.

15% of the security staff budget for Fortune 500 organizations with 50+ security FTEs is allocated to IAM.

11% of the security staff budget for Fortune 500 organizations with 50+ security FTEs is allocated to GRC.

6% of the security staff budget for Fortune 500 organizations with 50+ security FTEs is allocated to AppSec.

20% of the security staff budget for Fortune 500 organizations with 50+ security FTEs is allocated to SecOps.

8% of the security staff budget for Fortune 500 organizations with 50+ security FTEs is allocated to Incident response.

5% of the security staff budget for Fortune 500 organizations with 50+ security FTEs is allocated to Threat intel.

6% of the security staff budget for Fortune 500 organizations with 50+ security FTEs is allocated to Cloud security.

4% of the security staff budget for Fortune 500 organizations with 50+ security FTEs is allocated to Awareness training.

8% of the security staff budget for Fortune 500 organizations with 50+ security FTEs is allocated to Leadership & strategic roles.

35% say insufficient budget is the biggest barrier to maturing their insider risk program.

72% of organizations say their budgets for insider risk or data protection are increasing.

The average annual cash compensation for a functional department leader (such as a head of SecOps) at a Fortune 500-size company is 40% higher than the average for the same role at midsize security organizations.

8% of the security staff budget for Fortune 500 organizations with 50+ security FTEs is allocated to Other functions.

9% of the security staff budget for Fortune 500 organizations with 50+ security FTEs is allocated to Network security.

27% of organizations report significant growth in their insider risk or data protection budget over the past year.