84% expect demand for CISO services to rise as compliance, AI risks and increasingly complex security environments reshape customer needs
Managed service providers (MSPs) are moving beyond traditional IT and security management to become strategic cybersecurity advisers, according to Sophos’ 2026 MSP Perspectives Report. The research finds that 46% of customers already rely on their MSP to perform CISO-type responsibilities, while 84% of MSPs expect demand for these services to increase over the next 12 months.
The shift reflects a widening gap between the cybersecurity leadership organisations need and the specialist resources they can maintain internally. MSPs are increasingly being asked to provide governance, risk guidance, compliance oversight and strategic direction alongside technology operations.
Efficiency, however, remains a major challenge. MSPs estimate they could save 53% of their time by using a unified platform for customer security posture, compliance management and reporting. While 86% already use fully or partially automated processes for consolidated security reporting, only 31% can generate reports through a fully automated process.
“MSPs are already stepping into the CISO role for nearly half of their customers, creating a significant opportunity to deepen relationships and develop new, higher-value services.” — Matt Helling, Product Director, Sophos
Compliance is another significant growth area. Nearly all surveyed MSPs—99%—provide at least one cybersecurity compliance service, while 58% manage complete compliance programmes. Yet only 6% offer the full range of compliance services assessed in the research, pointing to substantial room for service expansion.
The report also highlights fragmented delivery models: 53% of MSPs use multiple tools for compliance or CISO-related activities, while only 33% are completely confident in their ability to continuously monitor and document compliance across multiple customers.
Sophos plans to address this gap with CISO Advantage, available from October 2026. Delivered through Sophos Fusion, the service uses agentic AI-accelerated assessments, reporting and roadmap workflows to help MSPs scale CISO-style services across their customer base.
The independent survey covered 800 MSPs across seven countries and was conducted by Vanson Bourne in April 2026.
