Cybersecurity was the leading answer given by IT leaders when asked what keeps them up at night, with AI only in second place, according to new research by BCS, The Chartered Institute for IT.

The annual survey, answered by 1,061 tech professionals found cybersecurity and resilience was their leading concern (selected by 36% of respondents).

Artificial Intelligence’s impact and implementation was the next biggest issue (for 21%). Business process automation was third with 13%, in the poll by BCS, the professional membership body for IT.

Seventy-four percent of technologists believe anyone working on cyber security within government should expect their accountability to be shown through achieving Chartered status, with 63% believing the same for those working in AI.

Only 5% of tech professionals feel their organisation has enough resources to achieve their priorities for 2025. Some 63% said their organisation needs enhanced IT capability and skills in the existing workforce.

Other concerns include “inability to change due to ‘old fashioned’ IT thinking”, “lack of IT supply chain transparency”, and the lack of access to skilled staff.

BCS has previously recommended the implementation of a mandatory Cybersecurity Code of Practice for Limited Companies and organisations providing IT products and services. That would include compulsory breach reporting and quarterly reporting on risk (including third-party risk).

BCS is also calling for company boards to include a member who will be held accountable for the firm’s cybersecurity throughout its life cycle. This should become a mandatory condition for companies seeking to be awarded public sector contracts.

Steve Sands, Chair of BCS’ Information Security specialist group said: “Tech leaders tell us they’re more likely to be kept awake worrying about the resources and skills needed to cover cybersecurity, than they are about AI alone.

“This might be a surprising finding to some – but the sheer volume of reports last year about attacks on businesses, hospitals and schools, shows security is a systemic issue going far beyond the IT department.

Recommended reading

• Report: Vulnerability Exploitation Surge Endangers Cybersecurity
• Comment | Cybersecurity Ethics in an Age of Evolving Cyber Risk
• Cyber Leaders Reveal Compliance and Boardroom Struggles

“The AI Opportunities Action Plan this week rightly highlighted the need for big investment in technology professionals, as part of the UK’s ambitions to be a world leader in emerging technologies.

“Cyber security requires not just investment but a healthy culture across organisations from the boardroom down. It’s about protecting our economy, safeguarding sensitive data, and ensuring trust. Threats are evolving daily and I’m sure Westminster and industry will take the opportunity to lead here, with the forthcoming Cyber Security and Resilience Bill.”