C-suite split on GenAI as CEOs push ahead & CISOs flag risks

NTT DATA has released a global report highlighting a lack of alignment among C-Suite executives regarding the adoption of generative artificial intelligence (GenAI) within organisations.

The report, titled "The AI Security Balancing Act: From Risk to Innovation," is based on insights from over 2,300 senior GenAI decision-makers across 34 countries. It reveals that while chief executive officers (CEOs) are largely optimistic and committed to further GenAI investments, chief information security officers (CISOs) are expressing significant concerns about security gaps and outdated infrastructure.

C-Suite disconnect

According to the findings, 99% of C-Suite executives intend to increase investment in GenAI over the next two years, with 67% of CEOs planning significant commitments. Alongside this, 95% of chief information officers (CIOs) and chief technology officers (CTOs) believe GenAI is already driving, or will soon drive, greater investment in cybersecurity.

Despite this broad executive enthusiasm, nearly half of CISOs (45%) hold negative sentiments towards GenAI adoption. Key obstacles cited include unclear internal guidelines around responsibility for GenAI usage and limitations imposed by legacy technology. While 54% of CISOs report their organisation's internal guidelines or policies on GenAI responsibility are unclear, only 20% of CEOs share this view, indicating differences in perception between strategic and operational leadership.

The report also highlights that, despite their caution, security teams recognise the business value of GenAI. It notes that 81% of senior IT security leaders with negative sentiment still agree that GenAI will improve efficiency and have a positive financial impact on the business.

Operational challenges

NTT DATA's research finds that a critical gap exists between executive vision and organisational readiness to support GenAI. While 97% of CISOs consider themselves key decision-makers on GenAI, 69% say their teams lack the necessary skills to work with the technology.

Only 38% of CISOs stated that their GenAI and cybersecurity strategies are aligned, compared to 51% of CEOs. This suggests differing assessments of how effectively organisations are addressing security in the context of AI deployments.

The report further reveals that 72% of organisations surveyed lack a formal GenAI usage policy. Moreover, just 24% of CISOs strongly agree their organisation has a robust framework in place for balancing risk with value creation from GenAI deployment.

Impact of legacy infrastructure

The study identifies outdated technology as a barrier to GenAI utilisation. A total of 88% of security leaders said legacy infrastructure significantly impacts business agility and readiness for GenAI adoption. The modernisation of systems, including IoT, 5G and edge computing, is flagged as essential for future progress.

To address these obstacles, 64% of CISOs are prioritising collaboration with strategic IT partners over deploying standalone AI solutions. The top criterion when selecting GenAI technology partners, according to security leaders, is the availability of end-to-end GenAI service offerings.

"As organisations accelerate GenAI adoption, cybersecurity must be embedded from the outset to reinforce resilience. While CEOs champion innovation, ensuring seamless collaboration between cybersecurity and business strategy is critical to mitigating emerging risks," said Sheetal Mehta, Senior Vice President and Global Head of Cybersecurity at NTT DATA. "A secure and scalable approach to GenAI requires proactive alignment, modern infrastructure and trusted co-innovation to protect enterprises from emerging threats while unlocking AI's full potential."

Craig Robinson, Research Vice President, Security Services at IDC, commented on the need for improved collaboration between business and cybersecurity teams:

"Collaboration is highly valued by line-of-business leaders in their relationships with CISOs. However, disconnects remain, with gaps between the organisation's desired risk posture and its current cybersecurity capabilities. While the use of GenAI clearly provides benefits to the enterprise, CISOs and Global Risk and Compliance leaders struggle to communicate the need for proper governance and guardrails, making alignment with business leaders essential for implementation."

The NTT DATA report is based on a survey conducted by Jigsaw Research and represents viewpoints across numerous C-Suite roles, vice presidents, directors, and senior managers, providing a broad spectrum of leadership perspectives on GenAI and cybersecurity strategy in the enterprise sector.