Object First Survey: Nearly Two-Thirds of UK IT Professionals Say AI-Powered Cyber Threats Increase Workplace Stress

Object First's UK survey found that 89% of IT and security professionals feel uncomfortably stressed by security risks, while only 31% believe their organisations are well-equipped to counter rising AI-powered cyber threats. Although 91% said AI improves productivity, 64% reported that AI-driven threats have increased workplace stress; only 35% are very confident they could fully recover company data after a ransomware incident. Turnover risk is elevated, with 53% considering leaving their role because of pressure and stress, underscoring demand for simpler, immutable backup and recovery infrastructure.

Analysis

This is vendor-sponsored survey evidence rather than a demand datapoint, so it does not justify a directional trade by itself. Its useful signal is that AI is expanding the attack surface faster than internal security staffing and recovery workflows can absorb it; budgets should therefore skew toward tools that reduce operational burden and demonstrably shorten recovery time, not merely endpoint detection features. That favors platform vendors with installed-base cross-sell and measurable resilience ROI—especially Veeam ecosystem partners, Rubrik (RBRK), Cohesity private-market exposure, Commvault (CVLT), and CyberArk (CYBR)—over point solutions dependent on discretionary proof-of-concept spend.

The second-order effect is a likely shift from prevention-centric security allocations toward recovery, identity, and data-governance controls. AI-generated phishing and privileged-access compromise make immutable backup valuable only if identity systems, clean-room recovery, and incident response are integrated; this supports CVLT/RBRK and CYBR more than storage hardware vendors alone. For hyperscalers, backup and security consumption are modest revenue contributors, but an enterprise preference for isolated or on-premises recovery could marginally temper the assumption that all resilience workloads migrate to public cloud, a relative negative at the margin for pure cloud-storage growth narratives.

Over the next 1-3 months, the relevant catalysts are ransomware disclosures, cyber-insurance renewal commentary, and enterprise CIO budget updates—not survey releases. Over 6-18 months, a sustained rise in recovery-focused spend could support higher recurring-revenue multiples for CVLT and RBRK if net retention, subscription mix, and billings accelerate. The thesis fails if enterprises respond to AI threats primarily by consolidating into Microsoft (MSFT) security bundles, or if budget constraints defer backup modernization despite elevated incident risk.

Key Decisions for Investors

• No immediate trade on this release; treat it as a watch signal and require corroboration from CVLT/RBRK billings, net retention, and management commentary on ransomware-recovery demand at the next earnings cycle.
• Prefer a 6-12 month long CVLT / short PANW pair in equal beta-adjusted dollars if CVLT reports accelerating subscription ARR or raised guidance: recovery modernization is less exposed to crowded firewall/SASE valuation risk. Target 15-20% relative upside; exit if CVLT subscription growth decelerates for two consecutive quarters or PANW reaccelerates platformization billings materially.
• Accumulate RBRK only on post-earnings volatility if subscription ARR and gross-margin expansion validate operating leverage. The asymmetric risk is Microsoft bundling and execution against a rich multiple; cap position size until renewal cohorts and free-cash-flow conversion are independently established.
• Maintain CYBR as the cleaner identity-driven hedge against AI-enabled privileged compromise; add on broad cyber weakness rather than chase incident headlines. Falsifier: material evidence that customers are consolidating privileged access into bundled MSFT offerings, reflected in CYBR net-new ARR or remaining-performance-obligation slowdown.