OPERATING MODEL
Headcount, not site count, drives the move away from centralized security.
Share of programs with a centralized operating model.
By company size
75%
53%
36%
Small · fewer than 5,000 employees
Mid · 5,000–49,999
Large · 50,000+
presented by the center for connected intelligence
The 2026 Corporate Security Benchmarks
We asked corporate security leaders how they structure, fund, staff, and modernize their programs. Explore the interactive benchmarks, filter by peers like you, and see where your program stands.
130
corporate security leaders at the world’s largest companies
Get the benchmarks
31 interactive benchmarks across 6 areas, plus the full report.
BROUGHT TO YOU BY
The Center for Connected Intelligence
The Center for Connected Intelligence is Ontic’s think tank for the security community — bringing together timely analysis, original research, expert perspectives and conversations that help leaders understand the risks shaping their world and what comes next.
INSIDE THE REPORT
What 130 security leaders told us.
REPORTING LINE
Security team reporting line by company size
Most common reporting line in each size group.
Large companies
50,000+ employees
Most often reports to
General Counsel / Legal
Mid companies
5,000–49,999 employees
Most often reports to
CHRO / HR
Small companies
Fewer than 5,000 employees
Most often reports to
COO
AI GOVERNANCE
AI adoption is outpacing governance.
Use AI in some form97.6%
Require human review for AI-assisted outputs48%
Keep AI audit logs31%
Test models or outputs18%
Adoption is now nearly universal across security organizations.
46%
AI literacy is the #1 hiring skill
Cited by 46.2% of leaders, ahead of every established security discipline.
58×
Contractors scale faster than staff
Median contractor headcount grows ~58× from small to large companies; in-house FTE grows ~9×.
23%
Insider risk is thinly owned
Security owns insider risk in just 23% of organizations.
47%
expect an increase in budget in the next 12 months
See all 31 benchmarks — and filter them by peers like you.
Source: 2026 Corporate Security Benchmarks, Ontic Center for Connected Intelligence (n = 130).
WHAT'S INSIDE
31 benchmarks across 6 areas
01
Operating model and remit
Where security sits in the org and what it covers.
02
Staffing and outsourcing
Who runs the program — in-house, contract, and where it’s outsourced.
03
Budget and spend
How programs are funded and where the money is moving.
04
Tech and AI
How programs run their tech stack and where AI is landing.
05
Reporting and business value
Where security has a seat at the table — and where it doesn’t.
06
Priorities and obstacles
What programs are investing in — and what’s holding them back.
Get the 2026 Corporate Security Benchmarks.
Interactive benchmarks and the full report, from 130 corporate security leaders.
© 2026 Ontic Technologies · All rights reserved