Businesses are increasing their investments in cybersecurity as artificial intelligence (AI) reshapes the threat landscape, according to findings from the 2025 KPMG Cybersecurity Survey. The report indicates that 99% of security leaders plan to boost their cybersecurity budgets over the next two to three years, marking a shift toward making cybersecurity a core element of business strategy.
The survey gathered responses from 310 C-suite and senior security leaders at U.S. organizations with revenues exceeding $1 billion. Results show that 98% of these organizations have already increased their cybersecurity budgets in the past year. This comes as 83% reported an uptick in cyberattacks, which range from phishing and ransomware to advanced AI-powered social engineering schemes.
Michael Isensee, cybersecurity & tech risk leader at KPMG LLP, commented on the significance of these findings: “The data doesn’t just point to steady growth; it signals a potential boom. We’re seeing a major market pivot where cybersecurity is now a fundamental driver of business strategy,” he said. “Leaders are moving beyond reactive defense and are actively investing to build a security posture that can withstand future shocks, especially from AI and other emerging technologies. This isn’t just about spending more; it’s about strategic investment in resilience.”
The survey highlights how increased spending, ongoing talent shortages, and the challenge of countering AI-driven threats are shaping organizational priorities. Companies are not only expanding their budgets but also focusing on building resilience through strategic investments and partnerships.
The study was conducted between September 25 and October 9, 2025.
