Nearly half of chief information security officers (CISOs) have negative opinions about the scale and speed of genAI rollouts, despite the wild optimism of their CEOs, according to new research from NTT Data.

The global tech service providers’ latest report, The AI Security Balancing Act: From Risk to Innovation, points to a severe misalignment at C-suite level over the role of genAI, a division already impacting business goals and operational readiness.

NTT found that while nearly all (99%) of C-Suite executives are planning further genAI investments over the next two years, with 67% of CEOs planning significant commitments, almost half of CISOs (45%) expressed negative sentiments toward further genAI adoption.

More than half (54%) of CISOs say they’re worried that internal guidelines and policies on genAI responsibility are still unclear, but only 20% of CEOs share the same concern, revealing a stark gap in executive decision-making.

The research also points to a clear gap between what business leaders want to achieve with genAI and what their teams are ready for. Although 97% of CISOs see themselves as key decision-makers on generative AI, nearly seven in ten admit their teams don’t yet have the skills needed to handle the technology effectively.

Making matters worse, only 38% of CISOs say their genAI and cybersecurity strategies are in sync, compared to 51% of CEOs who think they are.

At the root of this misalignment is the lack of formal policies surrounding genAI use, with almost three-quarters (72%) of organisations still lacking any guidelines or protocols, leaving just 24% of CISOs to agree that their organisation has a framework that can balance risk with value creation.

As well as internal misalignment, legacy tech is also limiting genAI adoption, as 88% of security leaders agreed older tech stacks are affecting both business agility and genAI readiness. 

Modernising IoT, 5G and edge computing were identified as essential for future progress, with 64% of CISOs prioritising innovation alongside strategic IT partners rather than relying on standalone AI solutions.

However, despite their fears, CISOs feelings on genAI remain complex. The vast majority (81%) of senior IT security leaders with negative opinions on genAI’s deployment still think that the technology can help boost efficiency, plug security gaps, and positively impact the bottom line.

Recommended reading

• 86% of C-Suite Leaders Ready to Spend More on AI
• Are We About to See A Mass C-suite Exodus?
• Gartner: Half of C-Suite Leaders May Leave in Two Years

According to NTT, that sentiment is evident across tech roles in the C-suite, with 95% of CIOs and CTOs reporting that genAI has already driven, or will drive, greater cybersecurity investments, with most firms ranking improved security as one of the top three business benefits realised from genAI deployment over the last year.

“While CEOs champion innovation, ensuring seamless collaboration between cybersecurity and business strategy is critical to mitigating emerging risks,” said Sheetal Mehta, senior vice president and global head of cybersecurity at NTT Data.

“A secure and scalable approach to GenAI requires proactive alignment, modern infrastructure and trusted co-innovation to protect enterprises from emerging threats while unlocking AI’s full potential.”