The 2026 CISO Survey reveals a worrying gap between planning and readiness when it comes to incident response.