The NTT DATA, “The AI Security Balancing Act: From Risk to Innovation,” reveals significant misalignment among C-Suite leaders regarding the adoption of Generative AI (GenAI).
The report indicates that 99% of executives plan further GenAI investments in the next two years, 45% of CISOs harbour negative sentiments about its adoption. This disconnect is concerning, especially given that 54% of CISOs find internal guidelines on GenAI unclear, contrasting sharply with only 20% of CEOs who share this concern.
Despite these reservations, 81% of security leaders with negative views still recognise that GenAI can enhance efficiency and positively impact the bottom line. This indicates an awareness of the potential benefits, albeit tempered by security concerns.
The research highlights a critical gap in operational readiness. Although 97% of CISOs consider themselves decision-makers on GenAI, 69% admit their teams lack the necessary skills to engage effectively with the technology. Moreover, only 38% of CISOs report alignment between their GenAI and cybersecurity strategies, compared to 51% of CEOs.
Legacy infrastructure poses another hurdle, with 88% of security leaders acknowledging that outdated technology hampers business agility and GenAI readiness.
Modernising systems, including IoT, 5G, and edge computing, is deemed essential for future progress. In light of this, 64% of CISOs are prioritising collaboration with strategic IT partners to navigate these challenges, highlighting a shift from standalone AI solutions to integrated approaches.
"As organisations accelerate GenAI adoption, cybersecurity must be embedded from the outset to reinforce resilience," stated Sheetal Mehta, senior vice president and global head of cybersecurity at NTT DATA. "Ensuring seamless collaboration between cybersecurity and business strategy is critical to mitigating emerging risks."
Craig Robinson, research vice president at IDC, also emphasised the importance of alignment: “CISOs and Global Risk and Compliance leaders struggle to communicate the need for proper governance and guardrails, making alignment with business leaders essential for implementation."
These insights underscore the necessity for CISOs to advocate for clearer governance frameworks and proactive investments in modern infrastructure to facilitate safe GenAI deployment.