Most Security Pros Say Their Culture Is Just Average
TechTarget, Thursday, June 18th, 2026
Only 29% of cybersecurity pros rate their organization's security culture as advanced.
According to the eighth annual Life and Times of Cybersecurity Professionals survey by ISSA and Omdia, most security professionals view their organization's cybersecurity culture as merely average. The study of 380 IT and security professionals found only 29% rated their culture as advanced, while 50% called it average and 19% described it as fair.
Top priorities for improvement include increased training (42%), staff and tool investment (37%), and better governance (36%). Experts emphasize that soft skills like communication and collaboration, combined with strong leadership commitment, are essential to building healthier cultures and reducing burnout.