A new report from Absolute Security has revealed that over half (54%) of Chief Information Security Officers (CISOs) in the UK believe their security teams are ill-prepared to counter evolving AI-powered threats.
The findings are based on the Absolute Security United Kingdom CISO Cyber Resilience Report 2024, which surveyed 250 UK CISOs at enterprise organisations to assess the state of cyber resilience, AI, and the cyber threat landscape in the UK.
In line with the National Cyber Security Centre (NCSC)’s assessment, CISOs are increasingly concerned about the potential for AI to amplify cyber attacks. The NCSC has warned that AI will “almost certainly” make cyber attacks against the UK more impactful, as threat actors can leverage AI to analyse exfiltrated data faster and more effectively, training AI models to launch more sophisticated attacks.
The report underscores the growing apprehension around AI’s role in cybersecurity. Almost half (46%) of CISOs surveyed believe that AI poses a greater threat to their organisation’s cyber resilience than it does a benefit. This highlights the potential dangers of AI in safeguarding organisations from cyber threats, rather than strengthening their resilience.
Furthermore, the survey found that 39% of CISOs have personally stopped using AI due to concerns about cyber breaches, and 44% have imposed bans on AI use by employees within their organisations for the same reason. These figures demonstrate the significant level of caution surrounding AI adoption in the face of potential cyber risks.
Andy Ward, VP International of Absolute Security, said: “Our research has highlighted the significant danger posed by evolving AI threats, and we urge organisations to strengthen their cyber resilience structures to cope. As AI-driven cyber threats continue to advance in complexity, proactive measures are essential to safeguard sensitive data assets and mitigate the associated risks.
“Although this report highlights how AI offers positive opportunities for organisations in terms of workforce development, updating and prioritising a policy of cyber resilience should be a top priority, not an afterthought. The repercussions of a breach, which can compromise both customer and employee data, can inflict irreparable damage. Therefore, organisations should focus on threat protection, deterring attacks, and preparing to defend against cyber threats. Achieving this requires clear visibility and effective control over networks, along with a robust framework to improve network supervision and establish a solid defensive stance. Organisations must leverage AI for competitive advantage, while simultaneously strengthening cybersecurity defences to prevent potential vulnerabilities.”
To learn more, view the full report at: https://www.absolute.com/media/djmjpg32/r-absolute-security-united-kingdom-cyber-resilience-report.pdf
