AI Adoption Outpaces Safety Policies, Leaving Organizations Exposed to Cyber Risk

Ah, the classic 'ask for forgiveness not permission' approach to enterprise AI. ISACA's latest survey drops a delightful little data point: 90% of digital trust professionals believe employees in their organisation are already neck-deep in AI tools, yet fewer than half have any safety or security policies in place. That's like letting teenagers borrow the family car but refusing to teach them how to brake.

Look, we've all seen this play out. Marketing is feeding customer data into ChatGPT for campaign copy, HR is using AI to screen CVs with hallucination-prone models, and legal is still drafting a 'generative AI acceptable use policy' that will be obsolete by the time it's approved. ISACA's 'digital trust professionals' — a job title that sounds like it was invented by a committee trying to sound reassuring — are essentially the canaries in the coalmine, and the canary is already face-down in the slurry.

Of course, the real joke is that this gap between adoption and policy is not a bug but a feature. Speed over safety, innovation over caution — that's the Silicon Valley mantra that's now being swallowed wholesale by every HR and IT department. After all, if your competitor is already using AI to write code and you're still debating whether to allow it, you're already behind. What could possibly go wrong? Besides everything.