New Survey Indicates Business Cybersecurity Gaps Amid Rising Adoption of Artificial Intelligence Tools

Structured Digest of the Announcement

A recent survey conducted by Nationwide highlights a disconnect between the widespread integration of artificial intelligence in business operations and the implementation of formal security protocols. While many employees now utilize generative AI for daily tasks, organizations often lack the necessary governance and training to mitigate emerging digital threats. This report outlines current trends in workplace technology usage and the subsequent vulnerability of small and mid-market enterprises to sophisticated fraud attempts that leverage these digital tools for malicious purposes.

Key Digest

10 Essential Facts at a Glance

Sixty percent of business owners report that employees use public AI chatbots or writing tools for work tasks.
Thirty-six percent of businesses have formal written policies governing the use of AI tools.
Thirty-seven percent of surveyed businesses provide training on the responsible use of AI.
Thirty-one percent of small and mid-market business owners reported being targeted by AI-enabled fraud in the last year.
Thirty-five percent of business owners maintain an up-to-date incident response plan.
Thirty-five percent of business owners believe employees are utilizing unauthorized AI tools for work.
The survey data was collected by Edelman Intelligence between July 10 and July 26, 2026.
Inter Insurance Agency suggests that AI accessibility has increased the potential for sophisticated phishing and impersonation attacks.
Cyber insurance is noted as a potential component for addressing data breaches and business interruption costs.
The survey emphasizes that current risk management strategies often fail to account for recent shifts in workplace technology.

What This Means

The rapid integration of generative AI into business workflows has outpaced the development of internal risk management frameworks. Data from the Nationwide survey suggests that while a majority of businesses have adopted AI-driven tools, a significant portion lacks the foundational policies required to monitor or control their usage. This creates an environment where unauthorized software usage and data exposure risks increase. As businesses rely more heavily on these platforms, the lack of standardized incident response planning becomes a critical vulnerability, particularly as threat actors refine their methods to bypass traditional security measures.

For the broader industry, these findings underscore the necessity of evolving risk management strategies to account for the unique characteristics of AI-enabled threats. The emergence of scams that utilize generative AI to impersonate trusted sources requires a shift in how companies approach employee training and communication security. Because technological infrastructure is changing faster than many institutional policies, businesses are being prompted to re-evaluate their insurance coverage and security procedures. The shift from static to dynamic risk management is becoming a standard requirement for maintaining operational resilience in an increasingly automated environment. Organizations that fail to align their internal policies with current technological realities may face increased exposure to financial and operational disruptions caused by sophisticated digital fraud and data security incidents.

Questions Worth Watching

How will insurance providers adjust coverage requirements as AI-enabled threats continue to evolve?
What specific metrics should businesses prioritize when evaluating the security risks of third-party AI tools?
To what extent will future regulatory frameworks mandate formal AI usage policies for small and mid-market enterprises?

Loading briefing details...