On top of a lack of training, just 17% of organisations are providing AI policies for employees.

Dublin–Despite nearly three quarters (73%) of European organisations reporting that their staff use AI at work, only 30% provide limited training to employees in tech-related positions, while 40% offer no training at all. That’s according to new research from ISACA, the leading global professional association helping individuals and organisations in their pursuit of digital trust, to understand the use, risk, and impact of AI.

However, issues around AI aren’t limited to the absence of training in the workplace. Policy on how AI should and shouldn’t be used is also lacking, with only 17% of organisations having a formal, comprehensive AI policy in place.

Aside from lack of training and policies, business and IT professionals are reporting a gap in education around AI. When asked how familiar respondents were with AI, almost three quarters (74%) were only somewhat familiar or not very familiar at all. Concerns around the use of AI don’t stop there: when asked about generative AI being exploited by bad actors, 61% of respondents were extreme or very worried that this might happen. When comparing data from last year’s survey, the sentiment has virtually not improved.

Chris Dimitriadis, Chief Global Strategy Officer at ISACA, said: “AI is going to continue to come to the fore, helping to shape the way that IT and cybersecurity industries transform and innovate. AI is being used twofold - bad actors are weaponising it to develop more sophisticated cyberattacks and in response it is being used by cyber professionals to better detect and respond to those threats. If businesses are to see the benefits of using AI, they need to have the right skills in place in order to be able to identify new threat models, risks and controls.”

Upskilling and training are in high demand, with 34% of respondents believing they will need to increase their skills and knowledge of AI in the next six months, and just over a quarter (27%) stating they will need to do so in the next seven months to a year, to retain their job or advance their career. In total, an overwhelming 86% of respondents feel that this training will be necessary within the next two years.

Dimitriadis adds: “As cyber criminals use AI to carry out increasingly sophisticated and targeted attacks, it’s more important than ever for cyber professionals to have formal training and clear company policies on AI to follow. Businesses can upskill their teams and keep pace with the evolving threat that the rise of AI poses, protecting their reputation and strengthening customer trust.”

For more information on how ISACA is addressing the knowledge gap and to access ISACA resources on AI, visit www.isaca.org/ai.

Notes to Editors

All figures are based on fieldwork conducted by ISACA between 7 March and 22 March 2024, amongst a total of 601 business and IT professionals in Europe. In total, ISACA surveyed more than 3,200 business and IT professionals worldwide.

About ISACA

ISACA^® (www.isaca.org) is a global community advancing individuals and organizations in their pursuit of digital trust. For more than 50 years, ISACA has equipped individuals and enterprises with the knowledge, credentials, education, training and community to progress their careers, transform their organizations, and build a more trusted and ethical digital world. ISACA is a global professional association and learning organization that leverages the expertise of its 185,000 members who work in digital trust fields such as information security, governance, assurance, risk, privacy and quality. It has a presence in 188 countries, including 225 chapters worldwide. Through the ISACA Foundation, ISACA supports IT education and career pathways for underresourced and underrepresented populations.

Twitter: www.twitter.com/ISACANews 
LinkedIn: www.linkedin.com/company/isaca 
Facebook: www.facebook.com/ISACAGlobal 
Instagram: www.instagram.com/isacanews 

Contact:

Firstlight group
+44 7526 565 507, isacateam@firstlightgroup.io  

ISACA
Esther Almendros, +34 692 669 772, ealmendros@isaca.org