The 2026 SANS Cyber Threat Intelligence Survey What CISOs Want: Intelligence-Driven Decisions

The 2026 SANS Cyber Threat Intelligence Survey: CISOs want Intelligence-Driven Decisions

This year's SANS CTI Survey reveals where CTI programs are falling short of executive expectations, and what leading teams are doing to close the gap. It also captures, for the first time, the CISO perspective. CISOs don't want more briefings on what's happening. They want intelligence that tells them what to do next.

Download the survey to learn:

● Why nearly three-quarters of CISOs say CTI isn't significantly driving their decisions — and what they're asking for instead
● The specific intelligence products CISOs prioritize (hint: actively exploited vulnerabilities and adversary TTPs beat broad strategic reporting)
● How leading programs are using stakeholder feedback loops
● Why only half of CTI programs can measure their own effectiveness, and what that's costing them in budget and influence
● How AI, geopolitics, and regulation are reshaping intelligence requirements in 2026