Security, risk, and privacy leaders continue to contend with uncertainty about the threat landscape as well as the growing pressure from regulations intended to reduce exposure to that landscape. In 2027, an AI-related lawsuit will force the ouster of leadership at a large organization; over one billion dollars will be spent on AI tokens; an AI-generated software flaw will cause a global outage; Mother Nature will cause outages and regulatory violations; and an attempt to control AI costs by changing models will lead to a breach. This report explores Forrester’s five predictions for cybersecurity and risk in 2027.