Navigating the AI-cybersecurity paradox: a deep dive into budget dynamics

Exabeam's recent report highlights the complex relationship between AI investments and cybersecurity budget planning, revealing challenges in aligning tech decisions with business outcomes.

Exabeam’s report, From Adoption to Accountability: The New Economics of AI in Cybersecurity, examines differences in cybersecurity strategies across the UK and Ireland (UKI). The study, based on a survey of 750 IT decision-makers, explores the relationship between rising budgets and increasing pressure to invest in AI within cybersecurity.

Cybersecurity budgets in the UKI are projected to increase in 2026, with 93% of organisations expecting growth. The primary driver of this investment is AI and automation, cited by 51% of respondents. The trend indicates a shift toward technology investment rather than traditional increases in staffing, reflecting the growing role of AI in security operations.

Although 93% of leaders report confidence that their investments are delivering value, challenges remain in communicating that value to executive stakeholders. The report finds that 26% of leaders face difficulties demonstrating the connection between cybersecurity investment and business impact at board level, as existing security metrics do not always clearly reflect business outcomes. This creates a gap between operational reporting and executive decision-making.

The study also highlights regional differences in AI adoption strategies. While the UK and Ireland show significant budget increases linked to AI adoption, Saudi Arabia reports a higher level of AI integration, with 75% of respondents stating that AI is already improving security operations. European and broader Asian organisations appear to take a more cautious approach, assessing long-term outcomes before expanding deployment at scale.

As cybersecurity budgets expand, organisations face increased expectations to demonstrate measurable outcomes. The report indicates that effective AI implementation requires more than technology deployment; it involves establishing outcome-based metrics that connect operational security improvements to business resilience and risk reduction.

In conclusion, the report suggests that organisations aiming to strengthen their cybersecurity posture may need frameworks that align technical investments with business impact. Security leaders may need to shift from traditional performance metrics toward measures that better reflect executive priorities and business risk management.

An examination of how Atlassian’s Rovo and Teamwork Graph introduce AI-driven automation into...
Craig Wilson to take the helm of Sopra Steria UK, focusing on growth and innovation in technology...
Despite significant investments, UK industrial companies face divided views on digital...
Tenable reveals AI-driven enhancements in its Tenable One platform, aiming to optimise cloud threat...
Arrow Electronics introduces experience centres in the US and Sweden to aid partners in leveraging...
Datadog introduces new AI tools aimed at streamlining operations and enhancing security during its...
Sectigo simplifies digital certificate operations with its new MCP Server, aiming to offer AI...
Explore Vanta's latest updates in risk management with their introduction of the Agent for Risk and...