Business Wire

AI Policies are Low, Use is High, and Adversaries are Taking Advantage, Says New AI Study


A new poll of global digital trust professionals is revealing a high degree of uncertainty around generative artificial intelligence (AI), few company policies around its use, lack of training, and fears around its exploitation by bad actors, according to Generative AI 2023: An ISACA Pulse Poll.

This press release features multimedia. View the full release here:

To view this piece of content from, please give your consent at the top of this page.

Global digital trust association ISACA surveyed more than 2,300 professionals who work in audit, risk, security, data privacy and IT governance to get their take on the current state of generative AI. (Graphic: ISACA)

Digital trust professionals from around the globe—those who work in cybersecurity, IT audit, governance, privacy and risk—weighed in on generative AI—artificial intelligence that can generate text, images and other media—in a new pulse poll from ISACA that explores employee use, training, attention to ethical implementation, risk management, exploitation by adversaries, and impact on jobs.

Diving in, even without policies

The poll found that many employees at respondents’ organizations are using generative AI, even without policies in place for its use. Only 28 percent of organizations say their companies expressly permit the use of generative AI, only 10 percent say a formal comprehensive policy is in place, and more than one in four say no policy exists and there is no plan for one. Despite this, over 40 percent say employees are using it regardless—and the percentage is likely much higher given that an additional 35 percent aren’t sure.

These employees are using generative AI in a number of ways, including to:

  • Create written content (65%)
  • Increase productivity (44%)
  • Automate repetitive tasks (32%)
  • Provide customer service (29%)
  • Improve decision making (27%)

Lack of familiarity and training

However, despite employees quickly moving forward with use of the technology, only six percent of respondents’ organizations are providing training to all staff on AI, and more than half (54 percent) say that no AI training at all is provided, even to teams directly impacted by AI. Only 25 percent of respondents indicated they have a high degree of familiarity with generative AI.

“Employees are not waiting for permission to explore and leverage generative AI to bring value to their work, and it is clear that their organizations need to catch up in providing policies, guidance and training to ensure the technology is used appropriately and ethically,” said Jason Lau, ISACA board director and CISO at “With greater alignment between employers and their staff around generative AI, organizations will be able to drive increased understanding of the technology among their teams, gain further benefit from AI, and better protect themselves from related risk.”

Risk and exploitation concerns

The poll explored the ethical concerns and risks associated with AI as well, with 41 percent saying that not enough attention is being paid to ethical standards for AI implementation. Fewer than one-third of their organizations consider managing AI risk to be an immediate priority, 29 percent say it is a longer-term priority, and 23 percent say their organization does not have plans to consider AI risk at the moment, even though respondents note the following as top risks of the technology:

  1. Misinformation/Disinformation (77%)
  2. Privacy violations (68%)
  3. Social engineering (63)
  4. Loss of intellectual property (IP) (58%)
  5. Job displacement and widening of the skills gap (tied at 35%)

More than half (57 percent) of respondents indicated they are very or extremely worried about generative AI being exploited by bad actors. Sixty-nine percent say that adversaries are using AI as successfully or more successfully than digital trust professionals.

“Even digital trust professionals report a low familiarity with AI—a concern as the technology iterates at a pace faster than anything we’ve seen before, with use spreading rampantly in organizations,” said John De Santis, ISACA board chair. “Without good governance, employees can easily share critical intellectual property on these tools without the correct controls in place. It is essential for leaders to get up to speed quickly on the technology’s benefits and risks, and to equip their team members with that knowledge as well.”

Impact on jobs

Examining how current roles are involved with AI, respondents believe that security (47 percent), IT operations (42 percent), and risk and compliance (tie, 35%) are responsible for the safe deployment of AI. When looking ahead, one in five organizations (19 percent) are opening job roles related to AI-related functions in the next 12 months. Forty-five percent believe a significant number of jobs will be eliminated due to AI, but digital trust professionals remain optimistic about their own jobs, with 70 percent saying it will have some positive impact for their roles. To realize the positive impact, 80 percent think they will need additional training to retain their job or advance their career.

Optimism in the face of challenges

Despite the uncertainty and risk surrounding AI, 80 percent of respondents believe AI will have a positive or neutral impact on their industry, 81 percent believe it will have a positive or neutral impact on their organizations, and 82 percent believe it will have a positive or neutral impact on their careers. Eighty-five percent of respondents also say AI is a tool that extends human productivity, and 62 percent believe it will have a positive or neutral impact on society as a whole.

Learn More

Read more in the infographic and other AI resources, including the AI Fundamentals Certificate, the complimentary The Promise and Peril of the AI Revolution: Managing Risk white paper, and a free guide to AI policy considerations, at


ISACA® ( equips individuals and enterprises with the knowledge, credentials, education, training and community to progress their careers, transform their organizations, and build a more trusted and ethical digital world. ISACA leverages the expertise of its more than 165,000 members who work in digital trust fields such as information security, governance, assurance, risk, privacy and quality. It has a presence in 188 countries, including 225 chapters worldwide. Through its foundation One In Tech, ISACA supports IT education and career pathways for underresourced and underrepresented populations.

To view this piece of content from, please give your consent at the top of this page.

Contact information
Emily Ayala, +1.847.385.7223
Bridget Drufke, +1.847.660.5554

About Business Wire

Business Wire
Business Wire
24 Martin Lane
EC4R 0DR London

+44 20 7626 1982

(c) 2018 Business Wire, Inc., All rights reserved.

Business Wire, a Berkshire Hathaway company, is the global leader in multiplatform press release distribution.

Subscribe to releases from Business Wire

Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.

Latest releases from Business Wire

Lenovo’s New All-in-One, AI-Powered Solution with Microsoft Simplifies Security and Removes the Need for Multiple Vendors6.12.2023 12:00:00 CET | Press release

Lenovo and Microsoft are working together to help organizations operate more securely across their devices, users, apps, data, networks, and cloud services through a subscription-based Cyber Resiliency as a Service (CRaaS) offering. The offering enables Lenovo to build next generation security solutions and services directly on Microsoft technology including Microsoft Azure, Microsoft Defender, and Microsoft Sentinel to simplify security deployments and enhance security posture to help prevent, detect, and recover from potentially disruptive cyber events. This press release features multimedia. View the full release here: Top Challenges Faced by CIOs (Graphic: Business Wire) CRaaS addresses growing security challenges for businesses of all sizes. Lenovo’s global annual survey of CIOs found that data privacy/security (68%) and cybersecurity/ransomware (68%) are the top two challenges businesses find most difficult to address.1 Wi

International Sustainable Forestry Coalition Welcomes New Member, Suzano6.12.2023 11:37:00 CET | Press release

In September a group of leading global sustainable forestry companies launched the International Sustainable Forestry Coalition (ISFC), to enable the sector to positively contribute to global policy processes focused on the transition from a fossil-based economy to a circular bioeconomy. Today the ISFC is delighted to announce that Suzano, one of the world’s major forestry sector companies, has become a member. Suzano, headquartered in Brazil, is a globally respected forestry sector leader. With almost a hundred years in operation, the company manages extensive sustainable timber plantation estates and forest conservation areas, and creates a vast range of fibre-based products. One out of every three tissue products used in the world today will have come from Suzano’s operations. Convening Chair of the ISFC Dr. David Brand said, “With the inclusion of Suzano in the ISFC, the group represents more than 12.6 million hectares (31 million acres) of forests for conservation and production i

Forrester: European Retail Sales To Reach €2.7 Trillion By 20286.12.2023 11:00:00 CET | Press release

Forrester (Nasdaq: FORR) forecasts that total retail sales of Europe-5 countries (France, Germany, Italy, Spain, and the UK) will increase from €2.3 trillion in 2023 to reach €2.7 trillion in 2028 at a 2.9% compound annual growth rate (CAGR). Forrester’s recently released report, Europe-5 Online Retail Forecast, 2023 To 2028, estimates total retail sales, online retail sales, and online retail penetration across 22 product categories, including fashion, homeware, food and drink, consumer electronics, and media, for each of the Europe-5 economies. Germany holds the largest share of the retail market among these five countries, followed (in order) by the UK and France. In 2022, offline retail growth outpaced online retail growth for the first time as more consumers shopped in stores, and this momentum continued into 2023, but the fundamental growth drivers of online retail such as greater product selection, round-the-clock availability, and competitive pricing remain strong. As a result,

Kaneka Acquires Japan Medical Device Technology6.12.2023 10:40:00 CET | Press release

Kaneka Corporation (Headquarters: Minato-ku, Tokyo; President: Minoru Tanaka)(TOKYO:4118) has acquired all shares of Japan Medical Device Technology Co., Ltd. (Headquarters: Kamimashiki-gun, Kumamoto; President: Shuzo Yamashita) (hereinafter JMDT), a developer and manufacturer of medical devices, on November 30, 2023, and made it a wholly owned subsidiary. This press release features multimedia. View the full release here: Stent before expansion (Photo: Business Wire) Kaneka manufactures and sells endovascular catheters, which are devices used in the treatment of cardiac, peripheral vascular, and cerebrovascular diseases. In particular, stenting*1 for the treatment of coronary artery diseases such as atherosclerosis has a market worth 30 billion yen in Japan, and Kaneka is aiming to expand its business in this area. JMDT has high technological capabilities in the research and development of coronary stents and is one of the lead

CommBox launches Era AI to enable customer service to be intelligently automated and CX costs to be cut by 40%6.12.2023 10:00:00 CET | Press release

Today CommBox, the pioneer in AI-powered customer communications, is launching its new generative AI solution. Designed for medium to large businesses across a range of industries including healthcare, banking, retail, telecommunications and insurance, Era AI is based on a winning combination of both proprietary technology developed by CommBox and commercial large language models. Era AI’s functionality scans enterprise knowledge sources and, in just seconds, provides customers with accurate, highly personalised information through the digital messaging channel of their choice. Era AI delivers customer service automation, reduces costs for organisations, and dramatically increases the speed and accuracy of enquiry handling. It does this all while increasing customer satisfaction, with CommBox customers seeing a 92% customer satisfaction rate on average. Central to this is Era AI’s ability to analyse a brand’s entire resource base, such as support articles, help and knowledge centres, a