A CISO’s guide to mastering AI risk | NTT DATA

Wed, 28 May 2025

A CISO’s guide to mastering AI risk

AI has elevated cybersecurity from a technological risk into a business risk. Its immense potential for innovation and growth is coupled with new and unforeseen security challenges.

As stated by Gartner® in the 2025 CIO Agenda: Global Insights and Data, “84% of CIOs and technology executives plan to increase their funding for AI from 2024 to 2025, and 87% plan to increase their funding for cyber/information security.”*

While it’s clear that AI is a transformative force, rapidly reshaping all industries, from manufacturing and logistics to retail and financial services, the surge in AI adoption has also brought forth sophisticated new cybersecurity risks. It is exposing new attack surfaces and unexpected security vulnerabilities while creating sophisticated, AI-enabled threats.

Meanwhile, cybercriminals are exploiting inadequate security controls to manipulate AI models and compromise data integrity. 

“Artificial intelligence (AI)-enhanced malicious attacks are the top emerging risk for enterprises in the third quarter of 2024,” according to Gartner, Inc.**

The high-stakes balancing act between AI and cybersecurity

At NTT DATA, we recognize the critical importance of balancing AI’s transformative potential with robust cybersecurity measures.

Our landmark Global GenAI Report also highlights that a significant majority of organizations are committed to increasing their spending on both AI and cybersecurity. This alignment is crucial, as it underscores the need for an integrated cybersecurity posture that can help you navigate the complex intersection of technology and business.

I am therefore excited to announce the launch of our new perspective, The AI Security Balancing Act: From Innovation to Security. It delves into the specific challenges and vulnerabilities introduced by AI and GenAI, offering valuable insights for CISOs to play a strategic role in balancing innovation with risk management.

New challenges for CISOs

We explore, among other things, why CISOs face a tricky balancing act in taking responsibility for security, privacy and compliance, and how they can proceed with caution.

They’re often in the challenging position of navigating fast-evolving, uncharted and unregulated territory. In a high-stakes AI security balancing act, they have to manage the tension between mitigating risk and supporting the ambitious goals of CEOs and other executives as they pursue growth and innovation.

In fact, our research shows that 54% of CISOs say internal guidelines or policies on responsibility are unclear — but just 20% of CEOs say the same.

And, of course, CISOs have to contend with aging and legacy infrastructure, with 93% saying that the demand for GenAI solutions is driving a review of their organizations’ network and edge architecture.

Complying with shifting and ambiguous regulations

Navigating the evolving landscape of government regulations on AI is another significant challenge.

According to our GenAI report, more than 8 in 10 organizations say these regulations are unclear, which stifles innovation and hinders investment in GenAI.

Furthermore, most expect spending on GenAI-related regulatory compliance to rise: 94% say GenAI has caused or will cause them to invest more in regulatory compliance, and 95% state the same for cybersecurity.

Our perspective provides guidance on how to ensure that your decision-making has a positive strategic impact on your organization’s business outcomes.

ALSO READ  The AI responsibility crisis: Why executive leadership must act now

Make security a strategic advantage

It’s clear that an AI-led, platform-driven approach to cybersecurity is now the best way to protect your data and other digital assets.

Let us help you evaluate your organization’s current cybersecurity strategy and guide you toward a more secure and prosperous AI-driven future.


Related Insights

* Gartner, 2025 CIO Agenda: Global Insights and Data GARTNER is a registered trademark and service mark of Gartner, Inc. and/or its affiliates in the U.S. and internationally and is used herein with permission. All rights reserved.

** Gartner Press Release, Gartner Survey Shows AI Enhanced Malicious Attacks as Top Emerging Risk for Enterprises for Third Consecutive Quarter, Nov. 1, 2024

How can we help you

Get in touch