Nearly 80% of Companies Use AI in Cybersecurity, but Governance Lags

As generative artificial intelligence gains traction across industries, it is transforming cyber offense and defense. Companies are adopting AI tools to accelerate threat detection, but the technology is also creating new security risks, including data leaks and model vulnerabilities. Robust AI governance has become an essential defensive foundation and a critical consideration for companies balancing technological innovation with information security.

A SANS Institute survey released in July 2026 found that 78% of companies had incorporated AI into their cybersecurity defenses, up sharply from 50% a year earlier. However, only 36% of respondents confirmed that their organizations had established formal AI risk-management programs. The findings point to a gap between frontline staff and management in their perceptions of governance, while 63% of practitioners said lagging governance had left significant shortcomings in threat detection.