For the first time, the 2026 SANS CTI Survey captures both sides of the gap: the analysts who produce intelligence and the leaders who act on it.Bethesda, MD, May 19, 2026 (GLOBE NEWSWIRE) -- <a href="https://www.globenewswire.com/Tracker?data=9H2S1kyiX52By4K5f4pv_cJ4e0SIyWBwNZKxjodZr8KNhxn6os2Xlf4tIlRCvI-FiFsXvci_2nukCskRbZEw4A==" rel="nofollow" target="_blank" title="SANS Institute">SANS Institute</a> released its 2026 Cyber Threat Intelligence (CTI) Survey Insights report, authored by <a href="https://www.globenewswire.com/Tracker?data=1PUpB-_q3wBCbF2s62WJgFWAzojN0RKAsrwc7kEFiYOfm_PEUJUbb31nOWLCQ2mUctNE_fzqxQP0pm8ujflgSf_hjqr8VKe-tp4wDR4iIipSy3ttgfLj04IPlDjiQZLc" rel="nofollow" target="_blank" title="Rebekah Brown">Rebekah Brown</a>, Senior Researcher and Certified Instructor Candidate, and <a href="https://www.globenewswire.com/Tracker?data=gB5QKehGhms4MpSrJbGzwkPTBJiDmPtkIXbx9oQZXGX-1J4DplCzIn-0NBs_G7h-0aVKiVSWoxi95sN6CclTqsSD0_SsucJMhEFJ2TnuhMeRXZ_IKvqUk7eo2w-ovwYK" rel="nofollow" target="_blank" title="Andreas Sfakianakis">Andreas Sfakianakis</a>, Certified Instructor, both of whom teach FOR578: Cyber Threat Intelligence. The report draws on responses from 401 qualified cybersecurity professionals globally, collected between November 2025 and January 2026, with a dedicated module capturing responses from 67 CISOs and CSOs.  The new CISO module gives practitioners and security leaders direct visibility into how the other side experiences CTI. For executives, it offers a look at how peers prioritize and consume intelligence. For practitioners, it provides an unfiltered view of what those executives reported when asked what intelligence they rely on and what would make CTI more central to their decisions.  "This year we have direct data from both sides of the conversation. CTI programs have spent years proving their value. The 2026 data shows the next challenge is converting that recognition into decisions, budgets, and action," said Rebekah Brown, Senior Researcher at SANS Institute and co-author of the report.  The survey data is specific about what executives want. Security executives' top priorities for the next 12 months are information about vulnerabilities being actively targeted by attackers (79%) and specific adversary TTPs (77%). Business-focused intelligence ranks last among report types at 41%, a number the report attributes to a production gap rather than lack of demand.  Delivering on that is complicated by how CTI programs are resourced. Most formal CTI teams remain under four full-time employees, even as the list of use cases they are expected to support expands. Lack of time to implement new processes and lack of funding are the top barriers to effective CTI implementation, each cited by 44% of respondents. 57% of programs do not track maturity over time, and 49% do not gather systematic feedback on effectiveness. Programs that cannot demonstrate improvement cannot defend their budgets with data.  The structural picture extends beyond headcount. 45% of organizations are using AI in CTI programs today, primarily for data summarization and report writing, with the human-in-the-loop model holding firm. 55% of organizations lack legally reviewed CTI sharing processes, even as NIS2 and the Cyber Resilience Act impose new obligations in 2026. The report characterizes that shortfall as a structural risk, not an administrative oversight. Security operations (71%) has reclaimed the top CTI use case it last held in 2022, overtaking threat hunting, a signal that intelligence is being embedded into daily defensive workflows.  Brown and Sfakianakis will present the full findings on Thursday, May 21, 2026, from 9:00 AM to 12:00 PM ET. The session qualifies for 3 CPE credits, and attendees may join live or access the recording.  <a href="https://www.globenewswire.com/Tracker?data=OpAXPAIkatCAvfHP9ce_8PX_F19_wzg4LsNufnelHzfUuGfG81yCRprKxSK84cU7-4t7zHKB5-5gvsUXZU6cRXHX6XZc7uA32nP8K4kzI9WBADRxYcCCFi3XWb7w_tnRqwg1MRmd-VIwim1VuLNZmCAByP8X9dEGMtmNTRegYqxZ4pteWPE7qDZgCV5pDCtv1DAmXO1G-qz4JLRZ_fgY9w==" rel="nofollow" target="_blank" title="Register for the 2026 SANS CTI Survey Insights webcast">Register for the 2026 SANS CTI Survey Insights webcast</a> and download the full report at<a href="https://www.globenewswire.com/Tracker?data=eQtggox6xE0SWhOlrWX1CQYKqRCHJX-WekHf5JDsv1H4-z-qw_EeD0mbC8G2a4AAWy47O1aUYGPCFP8ETQKvbg==" rel="nofollow" target="_blank" title=" "> </a><a href="https://www.globenewswire.com/Tracker?data=hJNoGjpnX_T_m2TBV2ZrZbZbFO4Wl5XZHnEFiPTC8CV9O5U1BqZmVySMN5cfVILRo-n7oPOmUlq5QkEjxasgCl43ZVahdpgcgjsCmYDz7r4Uj49fE1yFE32SY3Ql69TELgUs9FbugM7fUej3C_hwIQ==" rel="nofollow" target="_blank" title="">https://go.sans.org/cti-survey-webcast</a>  The survey was supported by sponsors Broadcom, ESET, Flare, Intel 471, SOCRadar, ThreatConnect (now part of Dataminr), and Wiz.  <pre>CONTACT: Jenn Elston
SANS Institute
301-654-7267
jelston@sans.org
</pre> <img alt="" src='https://ml.globenewswire.com/media/MGJmMGQ4NzktY2MwMi00YzI0LTk2MjYtNWJiZjY4NWU2ZjE4LTUwMDEzMjY5OS0yMDI2LTA1LTE5LWVu/tiny/SANS-Institute.png' referrerpolicy='no-referrer-when-downgrade' />

GlobeNewswire Inc.

91% of CISOs Value Cyber Threat Intelligence. Only 26% Say It Drives Their Decisions. New SANS Institute Report Reveals the Gap Between Recognition and Influence.

Latest news from the world of business and finance – both local and global

MONEY FM 89.3 is Singapore's first and only Business and Personal Finance station, featuring local and international business and financial news.

MONEY FM 89.3

Discover newsletters from our DJs on LinkedIn