IT leaders were surveyed on incoming security risks within the next one to three years, including generative AI, data privacy and third parties.