GenAI Adoption Soars, Yet Security Policies Lag Behind

▼ Summary
– 74% of European IT and cybersecurity professionals report staff using generative AI at work, but only 31% of organizations have formal AI policies in place.
– AI is improving productivity (56%) and efficiency (71%), but 63% are highly concerned about its misuse, with 71% expecting deepfake threats to rise.
– Only 18% of organizations invest in deepfake-detection tools, creating a security gap as AI-powered threats evolve rapidly.
– 42% of professionals believe they need AI upskilling in six months to retain or advance their jobs, yet 32% of organizations provide no AI training.
– While AI training exists, it’s often limited to IT staff (35%), despite 81% acknowledging widespread employee AI use, permitted or not.
Generative AI adoption is accelerating across European workplaces, but security policies struggle to keep pace with the rapid deployment. Recent research reveals a striking gap, while 74% of IT and cybersecurity professionals confirm employee usage of generative AI tools, only 31% of organizations have established comprehensive policies governing their use.
The benefits of AI are undeniable, with 56% of businesses reporting productivity gains and 71% noting improved efficiency. Yet these advantages come with escalating risks. Cyber threats like deepfakes and AI-driven misinformation are growing concerns, with 63% of professionals worried about malicious AI exploitation and 71% anticipating more sophisticated deepfake attacks. Despite these dangers, a mere 18% of companies invest in deepfake detection, leaving critical vulnerabilities unaddressed.
Regulatory frameworks like the EU AI Act emphasize risk management, yet many organizations remain unprepared. “The gap between awareness and action is widening,” notes a global strategy expert. “Without proper safeguards, businesses risk both security breaches and eroded trust in digital systems.”
Employee training is another weak link. While 42% of professionals recognize the need to upskill in AI within six months to stay competitive, 32% of companies provide no AI training whatsoever. Even when training exists, it’s typically limited to IT teams (35%), despite 81% of organizations acknowledging widespread, often unauthorized, AI use among staff.
The message is clear: harnessing AI’s potential requires proactive governance, targeted education, and investment in defensive tools. Companies that bridge these gaps will not only mitigate risks but also secure a competitive edge in an increasingly AI-driven economy.
(Source: HELPNETSECURITY)