2026 Study from Panorays: 85% of CISOs Can’t See Third-Party Threats Amid Increasing Supply Chain Attacks

Panorays has released the 2026 edition of its annual CISO Survey for Third-Party Cyber Risk Management, based on responses from 200 CISOs of US-based companies. The findings highlight that 15% of CISOs say they have full visibility into their software supply chains, while 85% still lack a complete view of their overall threat landscape, according to Panorays.

Preparedness remains dangerously low, with 77% seeing third-party risk as a major threat and only 21% having tested crisis response plans in place; meanwhile 60% report rising third-party breaches, yet just 41% monitor risk beyond direct suppliers. Shadow AI is creating new attack paths, with only 22% of CISOs having formal vetting processes, and 60% identifying shadow AI as uniquely risky.

Adoption of AI-driven assessment tools has grown to 66%, but traditional risk questionnaires are still viewed as inadequate by 71% of respondents. January 14, 2026.