Rapid Growth of AI Usage in Workplaces Outpaces Development of Appropriate Policies
In a recent survey conducted by the ISACA, digital trust professionals worldwide shared insights into the current state of AI adoption, governance, and training within their organizations. Here's a summary of the key findings.
The survey reveals that while many companies are extensively using AI in their workflows, a significant number lack comprehensive and formalized AI governance frameworks. This is particularly true for smaller and medium-sized enterprises, with only about 28% of organizations having a formal AI policy in place. Larger companies, however, are more likely to invest in formalized approaches, with around 28% having a formal, comprehensive policy for AI (an increase from 15% last year).
The survey also highlights concerns about the potential misuse of AI, with 61% of respondents expressing worry that generative AI will be exploited by bad actors. In response, 59% of organizations permit the use of generative AI, an increase from 42% last year. However, only 21% of organizations are currently investing in tools to detect or mitigate deepfakes.
AI training is another area of concern, with 59% of respondents believing that AI-powered phishing and social engineering attacks are now more difficult to detect. While 35% provide AI training only to those in IT-related positions, only 22% of organizations provide AI training to all staff. Consequently, 81% of respondents believe employees within their organization use AI, whether it is permitted or not, and 32% of respondents say there is no AI training provided to any employees.
The absence of formal policies and AI-specific cybersecurity measures leaves organizations vulnerable to manipulation, reputational harm, and data breaches. In fact, only 30% have a high degree of confidence in their ability to detect AI-related misinformation.
Despite these challenges, the survey indicates a positive outlook for AI's impact on careers. 72% believe that AI skills are very or extremely important for professionals in their field right now, and 56% of respondents expect AI to have a positive impact on their careers in the next year.
The survey also suggests that there is a growing need for AI training, with 89% of tech professionals saying they will need AI training within the next two years to advance their careers or even keep their current roles.
In conclusion, while AI is being used in a range of ways, governance, policy, and risk oversight are significantly lacking. As AI continues to evolve, it is crucial for organizations to invest in formalized AI governance frameworks, cybersecurity measures, and comprehensive AI training programs to mitigate risks and leverage the full potential of AI.
