CIOs rank AI as a growing cyber risk, survey finds

Logicalis has published research showing that chief information officers increasingly view AI as a cyber risk. In the survey, 28% ranked AI alongside established threats such as malware, ransomware and phishing.

The findings are based on a survey of 1,000 business and IT professionals involved in digital transformation and cloud computing across EMEA, APAC, the US and South America.

The report points to growing strain on security teams as organisations try to manage AI-related risks while still facing more familiar forms of attack. It found that 77% experienced a cybersecurity incident in the past year, while 41% reported slower incident response times and more than a third said their ability to detect breaches had fallen.

Security concerns linked directly to internal AI use also featured heavily. The survey found that 62% of CIOs said employees were jeopardising data security through AI use, while only 37% said they had full visibility of the AI tools being used across their organisations.

That lack of oversight appears to coincide with weak governance measures. Just 37% said they had AI bias processes in place, 40% used explainability mechanisms and 48% maintained AI audit trails and logging.

The data suggests many technology leaders now see AI not only as a tool to strengthen defences, but also as a new source of exposure. Nearly half of respondents said they often wished AI had not been invented, underlining the pressure on teams already dealing with persistent attacks and limited resources.

Budget Pressure

The research also indicates that many organisations are spending more in anticipation of cyber incidents rather than focusing solely on prevention. According to the survey, 68% have increased budgets for post-breach remediation and ransom payments.

That figure stands out against continued concern about conventional threats. Malware and ransomware were each cited by 33% of respondents as major risks, while phishing was named by 30%, placing AI close to the top tier of cyber concerns rather than at the margins.

The report also highlighted staffing problems in technology departments. A total of 94% of CIOs reported a cybersecurity skills shortage, suggesting many organisations are trying to confront a broader, more complex threat landscape without enough specialist staff.

In response, half said they were prioritising skills-based hiring and workforce upskilling through certifications and training. Another 44% said they were turning to managed services to address gaps in security teams.

Governance Gaps

The combination of poor visibility, weak internal controls and staff shortages creates a difficult environment for CIOs. Employees are adopting AI tools quickly, but many organisations appear to lack a clear picture of which systems are in use, how data is being handled and whether safeguards are working.

This matters because the report suggests AI-related risk is not confined to external attackers using automated tools. It also stems from internal use of applications that may sit outside approved systems, creating blind spots for security teams and increasing the risk of data exposure.

Among respondents, 34% believed AI had created new security blind spots. More than a third also reported a reduced ability to detect breaches, indicating that the spread of AI tools is affecting day-to-day defensive operations as well as strategic risk planning.

Logicalis, which reported annualised revenues of USD $1.63 billion and operates across Europe, North America, Latin America, Asia Pacific and Africa, said the findings show AI governance is now a central issue for technology leaders. The survey covered organisations with more than 250 employees.

Bob Bailkoski, Global CEO of Logicalis Group, said: "AI is a powerful force in cybersecurity, but without the right skills and governance, it can create more vulnerabilities than protection. CIOs have the challenging task of defending their organisations against AI-driven threats, but also from the risks posed by the very AI tools meant to safeguard them. Given skills shortages and an accelerating threat landscape, CIOs need strong governance, clear visibility, and trusted partnerships built into every AI initiative from the start to stay secure."