Approximately 19% say they primarily apply AI to security through their own internal data science work

Approximately 1 in 4 organizations said they’re concerned about how AI use in the enterprise will make them more attackable (AI and generative AI concerns)

Only 18% use AI to bolster vulnerability remediation workflows

Looking ahead, 70% of organisations will focus on AI/ML data usage governance.

Almost 60% of organisations added new AI data responsibilities in the past year.

59% of security professionals now have new AI data discovery responsibilities.

46% of firms say that they’re actively trying to use AI to solve false positive issues

77% of security teams cannot ensure AI systems respect proper data access rights.

79% of security teams struggle to classify sensitive data used in AI/ML systems.

56% cited data protection as a security function where AI will provide the most value in the next 3 years

42% cited identity and access management as a security function where AI will provide the most value in the next 3 years

54% of organizations added AI training data governance duties in the past year.

56% of security teams say the use of AI has become crucial to their team’s operations

The top three most common security use cases for AI are endpoint security (52%), basic vulnerability scanning (47%), and antivirus/anti-malware (40%)

Only 21% use AI to automate away configuration management and system hardening

Among those security departments that do their own custom AI work, 66% report that they have hired their own internal data science staff within their security teams

35% cited reporting as a security function where AI will provide the most value in the next 3 years

Nearly a third of respondents reported that their team spends at least four hours per week training AI models within their own tools or within commercially available AI functionality

100% of those who said their AI is very beneficial and a vital part of their security program have internal data science staff members

86% of security teams today utilize some type of AI within their security tool stack