Object First Survey: 70% of IT Professionals Say AI-Powered Cyber Threats Increase Workplace Stress

Object First's survey of 1,100 IT and security professionals in the U.S., UK, and Germany found that 91% feel uncomfortably stressed by workplace IT-security risks, up from 84% in 2025. The findings point to rising pressure on cybersecurity teams as threats become more sophisticated, underscoring sustained demand for resilient backup and ransomware-protection infrastructure.

Analysis

This is a weak standalone demand signal rather than a tradable catalyst: employee-reported security anxiety does not establish incremental IT budget, contract wins, or pricing power. The investable read is that ransomware resilience remains a protected spend category within flat enterprise budgets, favoring vendors tied to recovery time objectives and immutable storage over point-solution security tools dependent on net-new seat growth. Public beneficiaries with direct exposure include Rubrik (RBRK), Commvault (CVLT), Dell (DELL) and NetApp (NTAP); Object First's claims should be treated as channel marketing until supported by distributor or customer spending data.

Over the next 1-3 months, the key transmission mechanism is CIO budget reallocation following a material breach or insurer-driven control review. CVLT and RBRK can capture this through software/subscription growth, while DELL and NTAP benefit only if recovery architectures require dedicated on-prem hardware; hyperscaler migration can blunt that hardware effect. Broad cyber names such as CrowdStrike (CRWD), Palo Alto Networks (PANW), and Zscaler (ZS) may receive narrative support, but backup-recovery urgency is not equivalent to endpoint, firewall, or zero-trust demand.

The contrarian view is that heightened stress can reduce vendor proliferation: understaffed teams may consolidate onto Microsoft (MSFT), Dell, or an existing cloud platform rather than add specialized backup appliances. A recessionary IT-spend reset would also favor low-cost cloud archival tiers and incumbents with bundled contracts, pressuring smaller pure plays despite structurally intact ransomware demand. Falsification for the resilience-spend thesis would be CVLT/RBRK guidance showing elongating sales cycles, declining net retention, or weak public-sector/regulated-industry bookings in the next two reporting periods.

Key Decisions for Investors

• No immediate directional trade from the survey; place a 1-3 month watch on CVLT and RBRK for evidence of backup/recovery budget acceleration in earnings commentary, billings, net retention, and large-enterprise deal metrics.
• Prefer a 6-12 month long CVLT / short NTAP relative-value expression if CVLT sustains double-digit subscription growth while NTAP hardware-led revenue remains constrained; the thesis is software recovery monetization versus storage-capex cyclicality. Exit if CVLT subscription growth falls below management's medium-term range or NTAP shows accelerating all-flash and public-cloud data-services growth.
• For lower-beta exposure to enterprise resilience spending, accumulate DELL on broad infrastructure pullbacks rather than chase cyber beta; its installed base and services channel offer optionality if immutable on-prem recovery architectures gain share, but the position should be sized as a diversified infrastructure trade, not a pure ransomware thesis.
• Avoid using CRWD, PANW, or ZS as direct proxies for this signal. Upgrade only if breach disclosures or cyber-insurance requirements produce verified budget increases in endpoint, SASE, or managed-detection categories.