Sophos’ new report, “Beyond the Hype: The Businesses Reality of AI for Cybersecurity”, revealed that 89% of IT leaders are concerned that flaws in GenAI cybersecurity tools could negatively impact their organisation’s cybersecurity strategies.

“As with many other things in life, the mantra should be ‘trust but verify’ regarding generative AI tools. We have not taught the machines to think; we have simply provided them with the context to speed up processing large quantities of data,” said Chester Wisniewski, director, global field CTO, Sophos. “The potential of these tools to accelerate security workloads is amazing, but it still requires the context and comprehension of their human overseers for this benefit to be realised.”
The survey also revealed a significant trend in the industry: almost all organisations surveyed (98%) have some form of AI embedded in their cybersecurity infrastructure. However, IT leaders worry about a lack of cybersecurity accountability (87%).
Utilising GenAI
The study also found that large organisations (those with more than 1,000 employees) prioritise improved protection; respondents with 50-99 employees consider reducing burnout as their top desired benefit from GenAI tools.
Regardless of organisation size, 84% of leaders surveyed were concerned about pressure to reduce cybersecurity professional headcount due to unrealistic expectations about AI’s ability to replace human operators.