CISOs pressured to stay silent about cyber attacks need evidence-led governance for protection (www.techradar.com)

CISOs are increasingly pressured to remain silent about cyber incidents despite tightening regulatory demands for transparency, according to Splunk’s 2026 CISO report. The survey reveals that 20% of security leaders have been discouraged from reporting security incidents, leading to heightened concerns about personal liability—up from 56% last year to 78%. With a significant portion of CISOs now juggling additional responsibilities, including AI governance and financial crime investigations, the increasing complexity of their roles is notable. Compounding the issue, the upcoming Cyber Security and Resilience Bill in the UK is expected to impose stricter requirements on organizations to identify and disclose cyber incidents, further complicating the CISO's duty to balance accountability with operational discretion. This situation underscores the urgent need for evidence-led governance within organizations. CISOs must not only quickly identify and respond to threats but also ascertain that their decision-making processes are well-documented and defensible. Equipped with robust audit trails and the capability to correlate activities across various networks and systems, CISOs can better navigate the challenges of compliance while safeguarding their organizations’ reputations. In a landscape where the stakes are high, the call for enhanced governance and accountability in cybersecurity has never been more pressing.