Recent announcements by the UK prime minister and the impending gathering at the world’s first global Artificial Intelligence (AI) Safety Summit at Bletchley Park this week have brought AI and cybersecurity to the fore.

New and timely research by OnePoll and Gemserv, the cybersecurity consultancy, reveals that companies must upgrade their systems now as AI threatens to make cyber-attacks more sophisticated.

Knowledge and information gaps are emerging as critical challenges, particularly for chief information security officers (CISOs), as the cyber threat landscape is expected to become increasingly volatile, further exacerbated by this year’s geopolitical tensions.

In “Through the Cyber Lens: The Evolving Future of Cyber Security“, the study surveyed 200 CISOs across the United Kingdom and Europe, assessing the readiness of CISOs to confront their evolving challenges, particularly those stemming from the rise of AI innovation, while also exploring their expectations for the future.

Generative AI and Emerging Threats: The Perilous Path Ahead

The survey reveals that 38% of respondents anticipate a significant increase in cyber-attacks utilising deep fake AI technologies over the next five years, with an additional 45% expecting a moderate rise.

In total, a striking 83% of respondents believe that generative AI will play a more prominent role in cyber-attacks. However, a mere 16% of respondents consider their organisations to have an excellent understanding of these advanced AI tools.

“As the AI revolution transforms the landscape of cybersecurity, CISOs stand at the forefront of this change,” Mandeep Thandi, director of cyber and privacy at Gemserv, commented.

“AI is reshaping the contours of cyber defence by augmenting human capabilities, predicting threats, and fortifying organisations against the volatile cyber threat landscape.”

Preparing for Emerging Threats: A Need for Vigilance 

The ever-evolving cyber threat landscape presents CISOs with the formidable challenge of predicting and preparing for attacks. Information and budgetary resources are essential for adequate preparation.

The survey, however, did reveal that 69% of organisations lack access to either SIEM tooling or cyber threat intelligence, with 8% having neither.

Further, over three quarters (78%) of CISOs believe the cyber threat landscape will become more complex and challenging over the next 12 months.

Aware of emerging trends, a significant 83% of CISOs expect to see more cyber-attacks using generative AI tools.

In this environment of uncertainty, CISOs face challenges in securing adequate budgets, making informed decisions, and recruiting and retaining the right talent.

These hurdles underscore the urgency of investing in cybersecurity resources, including robust cyber threat intelligence, as a proactive measure to combat evolving threats.

When it comes to advising key stakeholders within their organisations, the research reveals that 63% of CISOs feel that their senior leadership lacks a comprehensive understanding of the imminent cybersecurity and privacy threats.

Recommended reading

• Can Generative AI Improve Work/Life Balance?
• How Do Young Tech Workers Feel About AI?
• OECD: Impact of AI in the Workplace Too Early to Call

Moreover, 69% of European CISOs and 61% of UK CISOs report a deficiency in cyber threat intelligence (CTI), hindering their ability to prioritise budgets and inform their boards about impending threats.

Mandeep Thandi emphasised the importance of CTI, stating, “CTI is vital for organisations as it provides proactive insights into potential cyber threats, enabling timely identification, risk assessment, and tailored defence strategies.

“It empowers organisations to stay ahead of adversaries, enhance incident response, and continuously improve their cybersecurity posture in the face of evolving cyber risk.”

New Regulations: A Ray of Regulatory Hope

Amidst these challenges, new regulations are on the horizon. The European Union’s (EU) AI Act and the UK’s Data Protection and Digital Information (DPDI) Bill are set to reshape the regulatory landscape.

These regulations aim tackle some of the most pertinent legislative quandries concerning the tech ecosystem, and aim to help regulate and clarify laws for developers, businesses, and consumers.

A notable 82% of CISOs believe these new regulations will support their organisations’ growth and expansion of services. The EU’s AI Act, in particular, distinguishes between high-risk and low-risk AI tools, aiming to ensure that organisations maintain high standards of transparency and security.

A Call for Resources and Resilience

In conclusion, the survey offers a sobering glimpse into the world of CISOs tasked with safeguarding digital landscapes amidst a barrage of challenges. While CISOs demonstrate unwavering resilience, the need for additional resources and support is palpable. Budget constraints, talent shortages, communication gaps, and evolving cyber threats underscore the urgency of fortifying cybersecurity efforts.

The cybersecurity landscape is ever-changing, and as threats evolve, so must our commitment to equipping CISOs with the resources they need to protect our digital future.