Skip to main content

Panorays publishes 2026 CISO survey on third-party risk

Source Decision Insights Record Published January 14, 2026 Companies 1
Human View Machine View

1st article in the last 90 days, the first article referencing Panorays.

Companies mentioned

Best suited for

Seniority
C Level / Executive Team
Job function
Chief Information Security Officer
Persona
Security Operations Leader
Buyer role
Decision Maker / Budget Holder
Decision stage
How to start
Adoption curve
Early Majority
Industry
Information Technology / Software & Services / IT Services / Cloud Services

Our classification, not the publisher's statement. Best suited for, not only for.

Panorays released the 2026 edition of its CISO Survey for Third-Party Cyber Risk Management and reported widespread visibility gaps that executives said undermined their ability to track third-party threats.

The report placed those visibility shortfalls alongside rising incident counts and constrained resources, noting that 60% of CISOs reported an increase in third-party security incidents while only 15% said they had full visibility into those risks. It also described that many technology stacks were not designed to manage dynamic supply-chain threats at scale.

The survey cataloged specific operational weaknesses: 77% of respondents viewed third-party risk as a major threat but only 21% had tested crisis response plans; 60% reported rising breaches yet just 41% monitored risk beyond direct suppliers; and only 22% had formal vetting processes for third-party Artificial Intelligence (AI) tools. It also recorded that 71% found traditional questionnaires inadequate and that 66% had moved to AI-driven assessment tools.

The research was based on responses from 200 CISOs of US-based companies and was conducted in October 2025 by the independent research company Global Surveyz on behalf of Panorays. The report said 61% of organizations had invested in Governance, Risk, and Compliance (GRC) software, yet 66% reported those platforms were ineffective at handling external third-party supply chain risks, and that adoption of GRC tools had risen from 27% the prior year.

“Our findings show that third-party security vulnerabilities aren’t going away – in fact, they’re becoming more prevalent due to a dangerous lack of visibility and the rampant adoption of unmanaged AI tools,” said Matan Or-El, founder and CEO of Panorays. “The rise of AI has only made supply chains more complex, and the connected nature of these data-dependent systems is expanding the attack surface,” said Matan Or-El, founder and CEO of Panorays. “CISOs are increasingly seeing the value of AI-driven solutions to increase clarity around the evolving threat landscape,” said Matan Or-El, founder and CEO of Panorays.

The survey found that 15% of CISOs said they had full visibility into their software supply chains, up from 3% a year earlier, and that 66% reported using AI-driven assessment tools compared with 27% the prior year.

Press release, provided by Globe Newswire on behalf of Panorays. Read the original.

Mentions

Structured data (JSON-LD)

The schema.org markup this page publishes for search engines and AI agents, exactly as they read it.

[
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#website",
    "@type": "WebSite",
    "name": "Decision Insights",
    "potentialAction": {
      "@type": "SearchAction",
      "target": {
        "@type": "EntryPoint",
        "urlTemplate": "https://decisioninsights.ai/search/?q={search_term_string}&submit=1"
      }
    },
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    },
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#organization",
    "@type": "Organization",
    "contactPoint": {
      "@type": "ContactPoint",
      "contactType": "customer support",
      "email": "[email protected]"
    },
    "description": "Decision Insights is a Registry of technology companies, open source projects, and industry terms, built for people and for AI agents that need sourced, structured information.",
    "logo": {
      "@type": "ImageObject",
      "url": "https://wiretap-cdn-assets.nyc3.cdn.digitaloceanspaces.com/decision-insights/[email protected]"
    },
    "name": "Decision Insights",
    "parentOrganization": {
      "@type": "Organization",
      "name": "Wiretap Labs",
      "sameAs": [
        "https://www.linkedin.com/company/wiretap-labs",
        "https://www.crunchbase.com/organization/wiretap-labs"
      ],
      "url": "https://wiretaplabs.com"
    },
    "publishingPrinciples": "https://decisioninsights.ai/standards/",
    "sameAs": [
      "https://www.linkedin.com/company/decisioninsights"
    ],
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@type": "BreadcrumbList",
    "itemListElement": [
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai",
        "name": "Decision Insights",
        "position": 1
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/records/",
        "name": "Records",
        "position": 2
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/panorays-publishes-2026-ciso-survey-on-third-party-risk/",
        "name": "Panorays publishes 2026 CISO survey on third-party risk",
        "position": 3
      }
    ]
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/panorays-publishes-2026-ciso-survey-on-third-party-risk/#blogposting",
    "@type": "NewsArticle",
    "about": {
      "@id": "https://decisioninsights.ai/registry/panorays/#organization",
      "@type": "Organization",
      "mainEntityOfPage": "https://decisioninsights.ai/registry/panorays/",
      "name": "Panorays"
    },
    "articleSection": [
      "Artificial Intelligence",
      "Cybersecurity",
      "AI infrastructure",
      "Data Center"
    ],
    "audience": [
      {
        "@type": "Audience",
        "additionalType": "Seniority",
        "audienceType": "C Level / Executive Team"
      },
      {
        "@type": "Audience",
        "additionalType": "Job function",
        "audienceType": "Chief Information Security Officer"
      },
      {
        "@type": "Audience",
        "additionalType": "Persona",
        "audienceType": "Security Operations Leader"
      },
      {
        "@type": "Audience",
        "additionalType": "Buyer role",
        "audienceType": "Decision Maker / Budget Holder"
      },
      {
        "@type": "Audience",
        "additionalType": "Adoption curve",
        "audienceType": "Early Majority"
      },
      {
        "@type": "Audience",
        "additionalType": "Industry",
        "audienceType": "Information Technology / Software & Services / IT Services / Cloud Services"
      }
    ],
    "author": {
      "@id": "https://decisioninsights.ai/author/decision-insights-signals/#person",
      "@type": "Person",
      "name": "Decision Insights Record",
      "url": "https://decisioninsights.ai/author/decision-insights-signals/"
    },
    "dateModified": "2026-08-27T10:32:18-06:00",
    "datePublished": "2026-01-14T09:01:21-07:00",
    "description": "Panorays CISO Survey found 85% of CISOs lacked full visibility into third-party cyber risk and 66% used AI assessments.",
    "headline": "Panorays publishes 2026 CISO survey on third-party risk",
    "isBasedOn": {
      "@type": "CreativeWork",
      "sourceOrganization": {
        "@type": "Organization",
        "name": "GlobeNewswire"
      },
      "url": "https://www.globenewswire.com/news-release/2026/01/14/3218725/0/en/2026-Study-from-Panorays-85-of-CISOs-Can-t-See-Third-Party-Threats-Amid-Increasing-Supply-Chain-Attacks.html"
    },
    "keywords": [
      "AI-Driven",
      "Governance, Risk, and Compliance",
      "Software",
      "Supply Chain",
      "Threats",
      "Visibility"
    ],
    "mainEntityOfPage": {
      "@id": "https://decisioninsights.ai/panorays-publishes-2026-ciso-survey-on-third-party-risk/",
      "@type": "WebPage",
      "sdDatePublished": "2026-08-27",
      "sdPublisher": {
        "@id": "https://decisioninsights.ai/#organization"
      }
    },
    "mentions": [
      {
        "@id": "https://decisioninsights.ai/registry/panorays/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/panorays/",
        "name": "Panorays"
      }
    ],
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    }
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/author/decision-insights-signals/#person",
    "@type": "Person",
    "description": "Press releases and independent analyst research, structured into concise summaries for research and monitoring. Produced under our Standards & Methodology.",
    "name": "Decision Insights Record",
    "sameAs": [
      "https://www.linkedin.com/showcase/decisioninsights/"
    ],
    "url": "https://decisioninsights.ai/author/decision-insights-signals/"
  }
]

Is this your company? Get structured data for your own pages