AI Adoption Surges in European Workplaces, But Policies Lag Behind, ISACA Reports

LONDON--(BUSINESS WIRE)--Nearly three out of four European IT and cybersecurity professionals report that employees are already using generative AI at work, a figure that has risen by ten percentage points in just one year, according to new research from ISACA. However, only 31% of organizations have implemented formal, comprehensive AI policies, highlighting a growing disparity between AI adoption and governance. The lack of robust policies is concerning because AI can be a double-edged sword. On one hand, it has proven beneficial, with 56% of respondents noting increased productivity and 71% reporting efficiency gains and time savings. Looking ahead, 62% are optimistic about AI's positive impact in the next year. On the other hand, the rapid proliferation of AI makes it an attractive target for malicious actors. A significant 63% of professionals are extremely or very concerned that generative AI could be misused against their organization. This concern is compounded by the expectation that deepfakes will become more sophisticated and widespread, with 71% foreseeing this trend in the coming year. Despite these risks, only 18% of organizations are investing in deepfake detection tools, leaving a substantial security gap. "AI holds tremendous promise, but without clear policies and training to manage risks, it can become a liability," says Chris Dimitriadis, ISACA’s Chief Global Strategy Officer. "With the EU AI Act setting new standards for risk management and transparency, organizations need to accelerate their efforts from awareness to action. AI threats, from misinformation to deepfakes, are advancing rapidly, and closing this risk-action gap is essential for both compliance and innovation." Policies alone are not enough; education and practical application are equally vital. As AI evolves, 42% of professionals believe they will need to enhance their AI skills within the next six months to stay relevant in their roles, an increase of 8% from the previous year. A staggering 89% recognize the necessity of upskilling within the next two years. To support organizations and professionals, ISACA offers resources ranging from free content guides to specialized training courses and certifications. These resources cover AI audit, AI security management, and other critical areas. For more on the 2025 AI Pulse Poll, visit www.isaca.org/ai-pulse-poll. For ISACA’s full suite of AI resources, visit www.isaca.org/ai. Notes to Editors All figures are based on fieldwork conducted by ISACA between March 28 and April 14, 2025, among a total of 561 business and IT professionals in Europe. Additionally, ISACA surveyed over 3,200 business and IT professionals worldwide. About ISACA ISACA® (www.isaca.org) empowers its community of over 185,000 members with the knowledge, credentials, training, and network necessary to excel in information security, governance, assurance, risk management, data privacy, and emerging technologies. With a presence in more than 190 countries and nearly 230 chapters globally, ISACA provides tailored resources for every stage of its members' careers.