Generative AI Sparks Tension Between CEOs and CISOs Over Security, Policy, and Readiness

CEOs push for generative AI investments, seeing it as vital for competitiveness, while many CISOs express concerns over unclear policies and risk management. Bridging this gap requires better collaboration and updated infrastructure.

Published on: Jun 18, 2025
Generative AI Sparks Tension Between CEOs and CISOs Over Security, Policy, and Readiness

CEOs and CISOs Clash Over Generative AI Benefits

CEOs are eager to push generative AI forward, while CISOs approach it with caution. A recent survey by NTT Data reveals a clear divide between C-suite leaders on business goals and readiness for AI deployment. Nearly all executives (99%) expect increased investment in generative AI over the next two years, with 67% of CEOs planning major commitments. A striking 89% of CEOs see AI as essential for maintaining competitiveness and profitability.

In contrast, 45% of CISOs hold a negative view of generative AI adoption. Over half (54%) report unclear internal policies on AI responsibilities, whereas only 20% of CEOs share this concern. This gap highlights a disconnect in organizational alignment on AI governance.

Collaboration and Risk Posture Challenges

Craig Robinson, research vice president for security services at IDC, emphasizes that while business leaders value collaboration with CISOs, gaps remain between desired risk postures and current cybersecurity capabilities. CISOs and risk leaders struggle to communicate the need for solid governance and guardrails, making alignment with business leaders critical for successful AI integration.

Security Perspectives on AI Investment

Among CIOs and CTOs, 95% report that generative AI drives increased cybersecurity investments. Improved security ranks among the top three benefits realized in the past year. Yet, only 38% of CISOs feel their AI and cybersecurity strategies are aligned, compared to 51% of CEOs.

Further complicating the situation, 72% of organizations lack formal generative AI usage policies. Only 24% of CISOs strongly agree that their organizations have effective frameworks balancing risk and value.

Embedding Cybersecurity in AI Adoption

Sheetal Mehta, senior vice president and global head of cybersecurity at NTT Data, stresses that cybersecurity must be integrated from the start to ensure resilience. CEOs may push innovation, but seamless collaboration between security and business strategy is essential to mitigate emerging risks.

A secure, scalable AI approach requires proactive alignment, updated infrastructure, and trusted partnerships to protect enterprises while unlocking AI’s potential.

Legacy Infrastructure Holds Back Progress

Legacy systems are a major hurdle for CISOs, with 88% saying they significantly impact business agility and AI readiness. Modernizing technologies like IoT, 5G, and edge computing is seen as vital for future advancement.

To address these challenges, 64% of CISOs are collaborating with strategic IT partners instead of relying on standalone AI solutions. Their top priority when choosing generative AI technology partners is end-to-end service offerings.

Governance and Ethics Remain Obstacles

The findings mirror a recent report from Experio, which found 39% of UK technology leaders believe their boards have unrealistic expectations about generative AI. Additionally, 41% cite governance and ethics as significant barriers to AI implementation.

  • Clear policies and governance frameworks are essential for balancing innovation and risk.
  • Security leadership must work closely with business executives to align strategies.
  • Modern infrastructure and trusted partnerships support scalable AI adoption.

For executives aiming to navigate AI adoption effectively, understanding these internal dynamics and prioritizing collaboration is key. Investing in training and education can also help bridge gaps between business goals and security concerns. Explore AI courses and resources to build strategic knowledge and support informed decision-making.