Survey: 72% of CISOs Are Concerned Generative AI Solutions Could Result In Security Breach

  • Apr 29, 2024

Metomic recently released its “2024 CISO Survey: Insights from the Security Leaders Keeping Critical Business Data Safe.” Metomic surveyed more than 400 Chief Information Security Officers (CISOs) from the U.S. and UK to gain deeper insights on the state of data security. The report includes survey findings on various cybersecurity issues, including security leaders’ top priorities and challenges, SaaS app usage across their organization, and biggest concerns with implementing generative AI solutions.

Data breaches are continuing to surge across industries, but particularly for healthcare, finance, and manufacturing organizations. According to industry reports, U.S. companies experienced 3,205 data breaches last year (up from 1,802 data breaches in 2022), with the average cost of a data breach in the U.S. climbing to $9.48 million in 2023.

According to Metomic’s survey findings, CISOs from both the U.S. and UK rank data breaches as their top security concern. In the U.S. AI and emerging tech follow data breaches as a top concern. In the UK, phishing schemes and compromised accounts follow data breaches as a top concern. The survey revealed that 84% of CISOs plan to focus their time and efforts on security operations in 2024, followed by strategy and planning initiatives (82%), and security awareness and training (79%). Thirty-six percent of CISOs in the U.S. report their organization uses more than 200 SaaS applications to run the business.

When looking at the biggest concerns connected to generative AI, security breaches were at the top of the list with 72% of CISOs confirming they are a primary concern, followed by sensitive company data being used to train the LLMs powering generative AI solutions.

Here is a snapshot of the biggest insights from Metomic’s CISO survey:

  • More than half of the survey respondents confirmed they have already experienced malware and phishing attacks on an occasional or frequent basis.
  • Creating and maintaining a strong security culture and awareness is a top challenge for both U.S. CISOs (41%) and UK CISOs (34%).
  • Nearly 60% of CISOs in the UK and U.S. say they should be spending more time on security ops, security awareness and training, and risk management.
  • The majority of respondents (80%) believe their organization runs security training programs for employees outside of the security organization often enough, while 93% believe employees have a high level of awareness when it comes to handling confidential and/or sensitive business data.
  • More than 80% of the CISOs surveyed somewhat or strongly agreed they can get the resources they need to do their job.
  • When looking at the number of SaaS apps businesses are currently using, 7% of U.S. CISOs and 4% of UK CISOs report their organizations have implemented more than 500 collaborative work apps.
  • Four-fifths of CISOs and IT security leaders plan to implement AI-powered tools to fight emerging AI-based security schemes and threats.

“Our research makes clear just how many challenges today’s CISOs are up against. In addition to protecting their organization against data security threats, they are prioritizing security operations and implementing training programs while trying to build a security-focused culture across the organization. They are overseeing IT budgets, monitoring SaaS environments, and calculating the impact of AI on their security efforts. It’s an exhaustive list that is becoming increasingly more difficult to manage,” said Rich Vibert, co-founder and CEO, Metomic. “As part of the cybersecurity community, we conducted this survey to offer security leaders a helpful resource when building their own data security policies. Being a CISO can feel extremely isolating, especially when it’s your job to manage the very tools your business uses to keep things moving forward. Metomic exists so that we can help CISOs better monitor their systems and networks by adding an extra layer of protection across their SaaS ecosystems.”

The reality is that the more SaaS apps a business implements and the more employees it has, the greater the risk of vulnerable company data landing in the wrong hands (industry reports claim 95% of data breaches are the result of human error). Metomic’s research found that 40% of the 6.5 million Google Drives it scanned included sensitive data that could put an organization at risk of a data breach or cybersecurity attack.

Featured

  • Evolving Cybersecurity Strategies: Uniting Human Risk Management and Security Awareness Training

    Organizations are increasingly turning their attention to human-focused security approaches, as two out of three (68%) cybersecurity incidents involve people. Threat actors are shifting from targeting networks and systems to hacking humans via social engineering methods, living off human errors as their most prevalent attack vector. Whether manipulated or not, human cyber behavior is leveraged to gain backdoor access into systems. This mainly results from a lack of employee training and awareness about evolving attack techniques employed by malign actors. Read Now

  • Report: 1 in 3 Easily Exploitable Vulnerabilities Found on Cloud Assets

    CyCognito recently released new research highlighting critical security vulnerabilities across cloud-hosted assets, revealing that one in three easily exploitable vulnerabilities or misconfigurations are found on cloud assets. As organizations increasingly shift to multi-cloud strategies, the findings underscore significant security gaps that could provide attackers with potential footholds into networks. Read Now

  • Built for Today, Ready for Tomorrow

    Selecting the right VMS is critical for any organization that depends on video surveillance to ensure safety, security and operational efficiency. While many organizations focus on immediate needs such as budget and deployment size, let us review some of the long-term considerations that can significantly impact a VMS's utility and flexibility. Read Now

  • Paving the Way to Smart Buildings

    In today's rapidly evolving security landscape, the convergence of on-prem, edge and cloud technologies are critical. The physical security landscape is undergoing a profound transformation, driven by the rapid digitalization of buildings and the evolving needs of modern organizations. As the buildings sector pivots towards smart, AI and data-driven operations, the integration of both edge and cloud technology has become crucial. Read Now

  • The Cybersecurity Time Bomb

    If you work in physical security, you have probably seen it: a camera, access control system, or intrusion detection device installed years ago, humming along without a single update. It is a common scenario that security professionals have come to accept as "normal." But here is the reality: this mindset is actively putting organizations at risk. Read Now

Most   Popular

New Products

  • Unified VMS

    AxxonSoft introduces version 2.0 of the Axxon One VMS. The new release features integrations with various physical security systems, making Axxon One a unified VMS. Other enhancements include new AI video analytics and intelligent search functions, hardened cybersecurity, usability and performance improvements, and expanded cloud capabilities

  • Mobile Safe Shield

    Mobile Safe Shield

    SafeWood Designs, Inc., a manufacturer of patented bullet resistant products, is excited to announce the launch of the Mobile Safe Shield. The Mobile Safe Shield is a moveable bullet resistant shield that provides protection in the event of an assailant and supplies cover in the event of an active shooter. With a heavy-duty steel frame, quality castor wheels, and bullet resistant core, the Mobile Safe Shield is a perfect addition to any guard station, security desks, courthouses, police stations, schools, office spaces and more. The Mobile Safe Shield is incredibly customizable. Bullet resistant materials are available in UL 752 Levels 1 through 8 and include glass, white board, tack board, veneer, and plastic laminate. Flexibility in bullet resistant materials allows for the Mobile Safe Shield to blend more with current interior décor for a seamless design aesthetic. Optional custom paint colors are also available for the steel frame.

  • AC Nio

    AC Nio

    Aiphone, a leading international manufacturer of intercom, access control, and emergency communication products, has introduced the AC Nio, its access control management software, an important addition to its new line of access control solutions.