CISOs Face Increased AI Governance Risks Amid Resource Constraints

• •78% of CISOs see generative AI as a security risk.
• •No additional resources are provided for managing AI governance.
• •Existing security mandates already include data protection and compliance.

A recent report by Proofpoint reveals that 78% of CISOs view generative AI as a significant security risk. Despite this, organizations are not allocating additional resources or budget to manage these new responsibilities. The report highlights that the governance of generative AI falls under the existing security mandates, which already include data protection, identity management, and compliance. The lack of visibility into AI tools used within organizations complicates governance efforts. CISOs are particularly concerned about sensitive data exposure, control of access, and employee activity monitoring. The report indicates that the complexity of security responsibilities has increased due to the rapid adoption of cloud architectures and remote work. The situation underscores a growing disconnect between expanding security responsibilities and the resources available to manage them.