CISOs Identify AI Security Risks and Adoption Challenges
Summary
Hornetsecurity’s interviews with three CISOs and a broader poll describe cautious AI adoption, uneven governance and awareness, and concerns including synthetic identity fraud, data poisoning, and sensitive-data exposure.
Key points
- The article draws on in-depth interviews with three CISOs and feedback from a broader global panel; it does not give the panel size or polling methodology.
- AI adoption varies, with many organizations limiting use to non-critical tasks or end users while introducing governance and internal tools.
- CISOs identify synthetic identity fraud as a leading emerging concern; voice and video impersonation, data poisoning, and fraudulent job applications are also raised.
- Interviewees warn that AI can amplify existing access and sharing risks, and that employees may expose sensitive company information by entering it into public AI tools.
- Security teams are testing AI for tasks such as triage, enrichment, ticket classification, and false-positive investigation, generally with supervision.
- Reported adoption challenges include uncertainty about AI risks, compliance and legal concerns, skills shortages, and difficulty demonstrating return on investment.
Article Details
- Publisher
- Hornet Security
- Scope
- CISO perspectives on AI use, risks, governance, and security operations, based on interviews in Germany, the United States, and France and feedback from a broader global panel.
- Sample Size
- Three in-depth CISO interviews; the size of the broader global panel is not disclosed.
- Key Statistics
- A CISO at a financial institution reported AI adoption as high as 75%+ within their organization over the previous two years.
- Most CISOs reportedly rated employee awareness of AI risks at 1 or 2 out of 5; the article does not provide respondent counts.
- Recommendations
- Before expanding AI use, review the data, permissions, and communication channels AI tools can access; remove unnecessary permissions and verify that only appropriate users can access sensitive content.
- Review anonymous links, external users, organization-wide permissions, public groups, inactive guests, and orphaned accounts.
- Provide focused, practical end-user education and clear security guidance on responsible AI use.
Vendors
Products
365 Permission ManagerRolling out in Q4 2026, Tenant Risk Exposure will complement Hornetsecurity by Proofpoint’s 365 Permission Manager with a visual overview of permission and sharing risks across Microsoft 365 tenants.AI.MYEquip your organization with AI.MY, the AI Cyber Assistant, designed to enhance user awareness while lightening the load on your Security and Support teams.Microsoft 365 Apps for EnterpriseRolling out in Q4 2026, Tenant Risk Exposure will complement Hornetsecurity by Proofpoint’s 365 Permission Manager with a visual overview of permission and sharing risks across Microsoft 365 tenants.Microsoft TeamsExtending Adaptive Awareness Training to Microsoft TeamsTenant Risk ExposureRolling out in Q4 2026, Tenant Risk Exposure will complement Hornetsecurity by Proofpoint’s 365 Permission Manager with a visual overview of permission and sharing risks across Microsoft 365 tenants.