PwC: AI Threats Lead Global Cybersecurity Preparedness Gap

Global cybersecurity leaders are least prepared to address threats targeting artificial intelligence (AI) systems, according to PwC’s 2027 Global Digital Trust Insights report. The findings, based on a survey of 3,934 business and technology leaders across 71 countries, reveal a significant gap in an organisation’s ability to defend against evolving AI risks.

Over half of respondents (52%) identified adversarial AI attacks as their most pressing cyber preparedness concern. This challenge is further complicated by a lack of clear ownership for AI risk management within organisations.

Governance and Data Gaps Highlighted

PwC’s report indicates that no single ownership model for AI risk management has firmly emerged. Accountability is split, with 29% assigning it to the CIO, CTO, or wider technology function, 26% to a dedicated AI leader or AI function, and 17% to the CISO or cyber function. Despite this, a third (33%) of CEOs, security, and risk leaders have already moved to appoint a dedicated AI role, such as a Chief AI Officer.

The proliferation of data risk also directly impacts AI security. The survey found that only around half of responding organisations have fully implemented fundamental data protection measures, with 49% having data classification policies and 48% using data loss prevention (DLP) policies.

Organisations are prioritising specific areas for AI security investment, with responsible AI governance (42%), platform hardening (38%), and supply chain security (35%) topping their to-do lists.

Skills Shortages Persist Amidst Optimism

The report underscores that skills shortages remain a significant obstacle to progress in AI security. Forty-four percent of CISOs cited a lack of workforce skills in AI oversight and governance as a primary barrier to increasing AI agent autonomy. Moreover, 55% of leaders ranked the reliability of AI technology as a factor preventing its broader adoption.

Despite these challenges, there is a notable sense of optimism regarding future cybersecurity investments. Eighty-four percent of security and finance bosses anticipate budget increases, a six-percentage-point rise compared to 2025. Furthermore, 58% of respondents consider AI a top-five priority for their cyber budgets.

Many organisations are also keen to leverage AI to bolster their cyber defences, with common applications including threat detection and alerting (50%), fraud detection (43%), and phishing detection and response (42%). AI is also seen as a potential solution for the skills gap itself, with 53% prioritising AI-enabled training to help upskill employees and improve retention.