AI Adoption Outpaces Safety Policies, Leaving Organizations Exposed to Cyber Risk

The ISACA AI Pulse Poll of 3,400 digital trust professionals finds widespread employee use of AI but limited formal AI policies: only 38% of organizations have comprehensive AI policies and 25% have none. The report highlights risks from 'Shadow AI' (employees using LLMs and other tools), gaps in the ability to halt or override AI systems during incidents, and rising concerns about AI-enabled threats like more convincing phishing, degraded authenticity checks, and reduced confidence in traditional detection methods, while noting defenders also see benefits from AI-based security tools.