Ross McKerchar, CISO at Sophos, discusses the results of the company’s recent Cybersecurity Trust Reality 2026 report and the State of Identity Security 2026 survey, The report reveals a critical challenge facing CISOs: trust in cybersecurity vendors is fragile, difficult to measure, and increasingly shaping risk posture at both operational and board levels; while the survey highlights the fact that identity has become the primary attack surface in modern cybersecurity, and most organisations are losing ground – with the non-human identity problem being particularly urgent.