"Substantially inadequate": Organizations are falling behind on AI policies.

A recent survey by the Information Systems Audit and Control Association (ISACA) reveals that many companies are struggling to keep up with the rapid use of artificial intelligence (AI) in the workplace. The poll, which included responses from over 3,000 digital trust professionals worldwide, highlights a significant gap in AI oversight and policy implementation.

The findings show that only 28% of organizations have a comprehensive AI policy in place. While this marks an improvement from 15% last year, it still falls short. The survey indicates that 81% of respondents believe their colleagues are using AI tools, with common applications including content creation, productivity enhancement, task automation, data analysis, and customer service.

Jamie Norton, a board director at ISACA, emphasized the urgency for leaders to establish proper frameworks and training to ensure responsible AI use. “AI is already embedded in daily workflows, but governance, policy, and risk oversight are significantly lacking,” Norton stated.

The report also pointed out that training is another area where many organizations are failing. Only 22% of companies provide AI training to all employees, while 32% do not offer any training at all. Jason Lau, another board director at ISACA, stressed the importance of creating a culture of continuous learning around AI. He warned that cybercriminals are already using AI to exploit vulnerable organizations, making the need for training even more critical.

Moreover, the survey revealed concerns about deepfake technology. Two-thirds of respondents expect these cyber threats to become more sophisticated in the coming year. However, only 21% of organizations are investing in tools to detect and counteract deepfake threats. Lau urged companies to integrate AI into their security strategies to keep pace with the evolving risks.

As AI continues to become an integral part of workplace operations, the need for effective policies, training, and security measures is more pressing than ever. Organizations must act swiftly to ensure they are prepared for the challenges that lie ahead.