Cyber Resilience: Priorities for Businesses in 2026

Cybersecurity is increasingly shaped by external factors: geopolitical tensions, stricter regulation, and artificial intelligence (AI) are transforming risks and dependencies. For CISOs, board members, and IT leaders, the key challenge is therefore to align technological dynamics with robust security and governance frameworks.

Cybersecurity Considerations for 2026: The Key Cybersecurity Issues in 2026

The English-language study “Cybersecurity Considerations 2026” brings together the perspectives of international KPMG cybersecurity experts and technology partners and outlines eight key areas of focus that should be on every organization’s agenda by 2026—from autonomous security operations centers to post-quantum cryptography.

verified_user

Autonomous Security and AI: Real-Time Defense

With the emergence of AI agents, the balance between attackers and defenders is shifting. While security teams use AI to analyze vast amounts of data, attackers are leveraging the same technologies for automated, high-frequency attacks. Organizations are faced with the challenge of making these new agents visible and manageable.

Contact us

assured_workload

Geopolitics and Regulation

In a world marked by new trade blocs, data sovereignty requirements, and fragmented technologies, security architectures are coming under pressure. It is essential to rethink supply chains, reduce dependencies, and ensure compliance wherever products are developed, data is stored, or services are operated.

fingerprint

AI, Non-Human Identities, and New Vulnerabilities

With the rise of AI, millions of non-human digital identities are emerging: bots, agents, and service accounts. They are transforming identity management as a whole. Traditional IAM models are reaching their limits. Companies need new methods to determine who or what is acting within their systems—and with what permissions.

What companies should do now:

Zero Trust—including identity management for both human and non-human actors.
Safely implement AI with clear responsibilities, red-teaming, and guardrails that enable rapid innovation without increasing risk.
Modernize security architectures, particularly where IT and Operational Technology (OT) converge.
Build quantum readiness to enable future encryption transitions without operational disruptions.
Continuously monitor supply chains instead of relying on annual audits.