EMA Research Finds AI Is Reshaping Data Security Priorities as Organizations Struggle with Governance and Multi-Cloud Complexity

EMA’s survey of 225 IT and business leaders finds AI is now the leading driver of DSPM investments: 64.4% cite securing AI data flows as the top reason for DSPM spend (up to surpass data exfiltration prevention at 56%). Respondents flag fragmented AI governance ownership (IT 30.2%, security 29.8%, data officers 20%, governance committees 18.7%) and multi-cloud policy consistency as a top concern (45.3%). Over 85% expect automated remediation to cut workloads, with ~33% anticipating workload reductions >50%, suggesting rising demand for automated DSPM capabilities as AI adoption accelerates.

Analysis

This is more of a budget-priority signal than a direct earnings catalyst. If AI security is now the gating item for DSPM spend, the incremental dollars should flow to vendors that can sell governance, policy orchestration, and integration across the stack—not to point solutions that only solve one slice of the workflow. That makes IBM the cleaner beneficiary because its enterprise relationships let it package data governance with consulting and platform software, which is where budget reallocation tends to show up first.

The more interesting second-order effect is margin mix. If buyers expect automation to cut remediation labor materially, the market should discount pure-services attach and reward software-led workflows; that helps scaled platforms and hurts implementation-heavy vendors. For FFIV, the linkage is weak unless security inspection around AI workloads drives materially higher application-layer traffic or policy enforcement demand, which is not yet evidenced here.

Contrarian take: consensus may be overestimating urgency. Fragmented accountability usually slows purchase conversion, and multi-cloud governance problems often create pilots rather than enterprise rollouts. The key falsifier is not the survey result but whether IBM shows a measurable uptick in security/data-governance bookings over the next 1-2 quarters; without that, this remains narrative support rather than a fundamental change.

Key Decisions for Investors

• Long IBM vs. FFIV for the next 1-2 quarters (beta-neutral pair). Thesis: IBM is better positioned to monetize AI governance through bundled software + consulting, while FFIV has only an indirect read-through. Target 5-8% relative spread; stop if IBM's security/data platform bookings do not inflect on the next earnings call.
• If looking for a cleaner expression, buy IBM on pullbacks into the July webinar / Q3 budget-cycle window. Time horizon 1-3 months; reward is modest multiple support if AI-governance demand starts appearing in commentary. Falsify if software bookings or margin mix fail to improve by the next quarter.
• Do not chase FFIV on this headline alone. Wait for evidence that security-adjacent traffic inspection or app-policy demand is showing up in backlog; absent that, the read-through is too diluted to justify a standalone long.
• Set an alert on IBM: if management starts citing AI governance, data security, or automation as a driver of deal size and win rate, that is the point to add. If the messaging stays at 'awareness' without budget conversion, treat this as a non-event.