AI and cybersecurity investment surge to the top of UK boardroom agendas, PwC survey finds

• Over eight-in-ten (85%) UK businesses say their cyber budget will increase in 2026, as organisations continue to evolve to address an expanding set of digital threats

• 69% of UK businesses report their cyber risk investment strategy will change over the next 12 months in response to the current geopolitical landscape

• 61% of businesses cite AI upskilling as part of their agenda for the next 12 months 

As Cyber Security Awareness Month comes to a close, UK business leaders have revealed their plans to increase investment in cybersecurity and artificial intelligence (AI) over the next 12 months, according to PwC’s 2026 Global Digital Trust Insights survey.  

The data shows UK organisations see cyber investment and strategic adaptations as business-critical priorities, with over eight-in-ten (85%) expecting cyber budgets to increase over the next 12 months and over half (56%) anticipating increased investment by more than 6%. Furthermore, over two-thirds (69%) of UK businesses say their cyber risk investment strategy needs to change to meet the demands of the geopolitical landscape over the next 12 months.

While raising cyber budgets is evidently a priority, ensuring resilience against an expanding range of digital threats remains a challenge. Only about one-half of UK organisations (51%) believe they are “very capable” of addressing a major cyber-attack targeting network architecture. Additionally, half of UK organisations (50%) say they will prioritise building out AI threat hunting capabilities, yet less than half (40%) have implemented AI practices in parts of their organisations responsible for addressing data risk. 

To address a rising array of cyber risks, 57% of UK organisations say they will look to either “slightly” or “significantly” increase spending on proactive measures. These extend to people-related functions, with organisations highlighting skills shortages as a significant barrier. 61% of respondents acknowledge upskilling, specifically improving AI and machine learning tools capabilities, as a priority, and almost half (47%) of UK firms are looking at upskilling and reskilling current employees to address skills gaps over the next 12 months. 

Significant investment in cyber-security has seen technology and transformation move to the top of leadership agendas. 58% of UK organisations say CISOs are now working “to a large extent” with a CIO / CTO to oversee tech and infrastructure deployments, while 56% note CISOs are regularly reporting and meeting with board-level executives. These percentages for UK organisations exceed peers across the globe (48%) and in Western Europe (50%). 

Quantum computing enters the boardroom conversation 

The data reveal UK businesses are committed organisationally and fiscally to addressing quantum computing-related risks. Nearly all (94%) UK organisations are implementing, testing, or exploring the implementation of quantum-resistant security measures. Just over half (53%) report the use of quantum computing security measures to map data and inventory, more than peers globally (42%) and in Western Europe (41%). However, less than half (39%) currently follow quantum-security measures to assess asset-based quantum risk and to implement “trust by design” principles. 

For organisations looking to incorporate quantum-security measures in the next two years, priorities include implementing cryptographic discovery (29%), conducting a feasibility analysis (27%), and implementing “trust by design principles” (25%). 

James Rashleigh, PwC UK & EMEA Cyber Leader, said: 

"This year’s Global Digital Trust Insights report reinforces a critical truth: cybersecurity has long been a priority issue for UK boardrooms, and what we’re seeing now is a significant shift from concern to commitment. Organisations are backing up their awareness with serious investment, embedding security into innovation, and doubling down on preparations around emerging risks related to AI and quantum computing. Those that act decisively will be best positioned to build trust and resilience in an unpredictable world.”

Notes to Editors: 

The survey interviewed 3,887 business and tech executives from across 72 countries and territories, including 334 from the United Kingdom. Of the 334 UK participants, 50% best described their role as related to business, 45% to data and privacy tech, and 5% to tech security. 27% of respondents said they worked in technology, 15% in banking and capital markets, 6% in business services, 5% in pharmaceuticals and life sciences, and 4% in health provision. 

Explore the full results here