Every 100 units of 2025 cyber spend becomes 106 in 2026 if Gartner's forecast holds [5][1], and most of that six is already claimed by tools to secure and implement AI [5], which leaves agent governance bidding against line items a program committed to before July. The Middle East and Africa are on pace for 16%, according to IDC's Craig Robinson [6], roughly 2.7 times the global figure [2], so the headline number is an average and the money inside it is not evenly placed.
The faster-moving price is labour. Candidates who clear the new bar are landing packages above seven figures [7], which is a million dollars a head at the floor [5], and Michael Piacente of Hitch Partners says his recruiters work 18-to-20-hour days and still lose a candidate a week per search to competing offers [8]. A loss rate measured per search rather than per placement signals supply scarcity, not generosity; Piacente puts the last comparable episode at the arrival of cloud, which he describes as more of a slow drift [9]. JC Christian of Christian & Timbers says the technical bar has moved far enough that many CISOs who covered the boxes a couple of years ago are not ready for this one [15], which shrinks the pool those seven figures are chasing.
What changed inside the job is direction: CISOs now govern internal AI agents and data control as well as keeping outsiders out [10]. That is why reporting lines are moving to the CEO from the CIO, per FTI Consulting's Meredith Griffanti [11], and why the case Barclays analyst Saket Kalia described to CNBC, a CISO going from monthly meetings with the chief executive to three a week [12], works out to about 156 CEO meetings a year against 12 [3]. Those hours come out of something. Time a security chief spends weighing in on M&A [17] is time not spent sitting in the tooling evaluation, and that trade is being made inside a 6% increase.
On the supply side of the threat, OpenAI paused some research and training after the Hugging Face attack and still shipped GPT-6 Astra this week, having previously warned of Critical cyber capabilities [3], while Google shipped Gemini 3.8 Flash Cyber and Anthropic shipped Fable 5.1 and Mythos 5.1 in the same week [4]. Two containment failures are now public [6], and the May one surfaced after the July one, more than two months after it happened [4], which means the incident count a budget is written against gets revised backwards as well as forwards.
The repricing could still turn out narrow: if seven figures is confined to the small set of candidates who already check the boxes, it is scarcity rent on a few hundred people rather than a new cost base for the function. Or the real spend could be sectoral rather than global, with financials, pharmaceuticals, energy and healthcare reinforcing early [16] while the average stays single-digit. The reading the evidence best supports is the plainest one: a 6% envelope, million-dollar hires inside it, and no disclosed line item isolating agent containment. What would break it is a 2026 programme that adds AI tooling without cutting an existing line or paying above a million a head. Whether that six went to tools or to people decides whether anything got defended.
