The AI Reality: New Research from ISACA Identifies Gaps in AI Knowledge, Training and Policies

According to a new ISACA pulse poll of 3,270 digital trust professionals, only 15% of organisations have AI policies, and 40% of organisations offer no AI training at all. These gaps are concerning given that 70% of respondents say staff are using AI, and 60% say employees are using generative AI (e.g., Microsoft CoPilot, Google Gemini, and OpenAI's ChatGPT).

The poll showed the most common uses of AI are:

• Increasing productivity (35%)
• Automating repetitive tasks (33%)
• Creating written content (33%)

A full 60% of respondents are worried or very worried that bad actors will exploit generative AI, with 81% saying the top AI risk is misinformation/disinformation. Yet only 35% say AI risks are an immediate priority for their organisation.

Respondents believe jobs will be significantly impacted by AI, with 45% saying many jobs will be eliminated over the next five years and 80% saying many jobs will be modified. 

Jo Stewart Rattray, Oceania Ambassador, ISACA said there is no doubt AI is shaping the future and redefining the very nature of work and future IT jobs.

"Despite workplaces experiencing a staggering increase in AI usage among staff, I'm not surprised that only 15 percent have AI policies in place and 40 percent offer no training to staff," said Ms Stewart-Rattray. "This technology has crept up on organisations in Australia and New Zealand quickly, and is changing rapidly, leaving little time and capacity for companies to develop and implement organisation-wide policies and procedures, that will remain relevant.

"At the very minimum though, organisations should prepare a policy around AI usage to not only ensure consistency and accuracy of brand messaging and content, but to support security efforts.

"And as companies begin to expand job descriptions to include AI competency, prioritising diversity and inclusion is key. This not only broadens the talent pool but provides a strategic edge for organisations, as gender-balanced tech project teams promote diverse thinking and innovation."

According to ISACA's survey, those digital trust professionals working in fields such as information security, governance, risk and privacy are more optimistic about their own jobs with seventy-eight percent saying AI will have a neutral or positive impact on their careers.

To achieve that neutral or positive impact and retain or advance their careers, 85% say they will need to increase their AI skills and knowledge within two years.

"AI is moving at a speed we haven't seen before, with its use in organisations outpacing the policies, training and skills that are absolutely critical for making sure it is used securely," said Shannon Donahue, ISACA Chief Content and Publishing Officer. "AI is quickly becoming a business imperative, and ISACA is fully committed to providing the tools, resources and training to help individuals and enterprises thrive in an AI world."

ISACA is addressing this knowledge gap by releasing a series of on-demand AI training, with three courses launching today:

• AI Essentials—Explores foundational principles and applications of AI and provides a comprehensive overview of core AI concepts, algorithms and application of AI
• Auditing Generative AI: Strategy, Analysis and Risk Mitigation—Explores generative AI, including considerations of usage, associated risks, and its impact on auditing processes, with emphasis on security, ethical considerations, data governance, and compliance with regulations
• AI Governance: Principles, Strategies and Business Alignment—Explores how governance practices apply throughout the AI lifecycle, from development and implementation to ongoing monitoring and maintenance, ensuring consistent and effective governance at every stage

To access these and other ISACA resources around AI, visit www.isaca.org/ai.

Survey Methodology

ISACA's AI Pulse Poll was conducted online from 7-22 March 2024. The poll received 3,270 completed responses globally. The margin of error is +/- 2% at the 95% confidence level.

About ISACA

ISACA® (www.isaca.org) is a global community advancing individuals and organisations in their pursuit of digital trust. For more than 50 years, ISACA has equipped individuals and enterprises with the knowledge, credentials, education, training and community to progress their careers, transform their organisations, and build a more trusted and ethical digital world. ISACA is a global professional association and learning organisation that leverages the expertise of its more than 180,000 members who work in digital trust fields such as information security, governance, assurance, risk, privacy and quality. It has a presence in 188 countries, including 225 chapters worldwide. Through the ISACA Foundation, ISACA supports IT education and career pathways for under-resourced and underrepresented populations.