Pentera Survey Finds CISOs Lack AI Security Visibility, Skills and Tools
Summary
Pentera’s survey of 300 US CISOs found limited visibility into organizational AI use, a shortage of AI security expertise, and heavy reliance on legacy controls; only 11% reported AI-specific security tools.
Key points
- In Pentera’s survey of 300 US CISOs and senior security leaders, 67% reported limited visibility into how AI is used in their organizations; none reported full visibility.
- Respondents cited a lack of internal AI security expertise (50%) and limited visibility (48%) as leading obstacles.
- While 75% rely on traditional security controls to protect AI systems, only 11% reported using tools designed specifically for AI infrastructure.
- Only 17% cited budget constraints as a primary obstacle.
- The report recommends building specialized expertise and actively testing security controls in environments where AI is operating.
Article Details
- Publisher
- Pentera
- Report Period
- 2026 (report year; survey dates not stated)
- Scope
- Survey of US CISOs and senior security leaders about securing AI infrastructure
- Sample Size
- 300 US CISOs
- Key Statistics
- 67% of respondents reported limited visibility into organizational AI use; none reported full visibility.
- 50% cited lack of internal AI security expertise as an obstacle.
- 48% cited limited visibility into AI usage as an obstacle.
- 75% relied on legacy security controls to protect AI systems.
- 11% reported having security tools designed specifically for AI infrastructure.
- Recommendations
- Build specialized AI security expertise.
- Actively test security controls in environments where AI is operating.