Sounil Yu and I asked security leaders ten questions about how their organizations secure AI. The survey has closed, and you can compare your approach with your peers' in the AI Security Decisions Report.

This post was published in July 2026 to invite responses to the survey, which has since closed. Sounil Yu and I published the findings as the AI Security Decisions Report. I also wrote about my favorite findings from it.

Security leaders are making AI security decisions with almost no data about how their peers handle the same choices. Existing surveys measure AI adoption, incidents, and governance policies, but not which assets organizations protect or who makes the decisions.

Sounil Yu and I built a short survey to start closing that gap. We'd like your help turning it into a benchmark the whole community can use. If securing AI is part of your job, whatever your title, the survey is for you.

The survey asks how your organization secures AI in practice. Its ten questions take about five minutes and cover:

• Which AI-related assets your organization considers part of its attack surface.
• Which of those assets you protect with at least one dedicated control.
• Who decides how your organization secures AI.
• Whether your AI security controls come from existing tools, specialized vendors, AI providers, or tools you build in-house.

You'll get a peer benchmark in return. Sounil and I will publish the aggregate findings, so you can compare your approach against others facing the same decisions.

Your answers are anonymous. If you want to see the findings early, leave your email at the end; we'll use it only for that mailing.