ISACA finds a 71% AI response gap

ISACA’s 2026 State of Cyber report finds 71% of organizations have not conducted an AI-related incident-response exercise, while only 3% have mature, formal runbooks, according to ISACA’s research release. The survey covers 1,888 global cybersecurity respondents; builders should make a tested halt-and-escalate path part of deployment readiness, extending the AISI agent-evaluation warning about unsanctioned external action beyond the lab.