Only One in 10 Organizations Globally Are Ready to Protect Against AI-Augmented Cyber Threats

Accenture report identifies four critical actions to strengthen cyber defenses in an AI-driven world

As artificial intelligence (AI) radically reshapes business, a vast majority of organizations (90%) are not adequately prepared to secure their AI-driven future, according to a new report from Accenture (NYSE: ACN). Globally, nearly two-thirds (63%) of companies are in the “Exposed Zone,” indicating they lack both a cohesive cybersecurity strategy and necessary technical capabilities.

This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20250626539892/en/

As artificial intelligence (AI) radically reshapes business, a vast majority of organizations (90%) are not adequately prepared to secure their AI-driven future, according to a new report from Accenture.

Accenture’s “State of Cybersecurity Resilience 2025” report is based on a survey of 2,286 cybersecurity and technology executives from large organizations around the globe. It reveals that the rapid AI adoption has dramatically accelerated the speed, scale and sophistication of cyber threats, far outpacing current enterprise cyber defenses. For example, more than three-quarters (77%) of organizations lack the essential data and AI security practices needed to protect critical business models, data pipelines and cloud infrastructure.

"Rising geopolitical tensions, economic volatility and increasingly complex operational environments, coupled with AI-augmented attacks, are leaving organizations more vulnerable to cyber risks. This report serves as a wake-up call that cybersecurity can no longer be an afterthought. It must be embedded by design into every AI-driven initiative,” said Paolo Dal Cin, global lead, Accenture Security. “Taking this proactive approach will help ensure a competitive edge, strengthen customer loyalty and turn cybersecurity into a business enabler.”

Despite the rapid growth of AI enterprise adoption, only 22% of organizations have implemented clear policies and training for gen AI use. Furthermore, very few maintain a comprehensive inventory of AI systems, which is crucial for managing supply chain risks. Additionally, data protection remains inadequate, with only 25% of organizations fully leveraging encryption methods and access controls to protect sensitive information.

"The rapid advancement of gen AI represents a profound paradigm shift in cybersecurity, bringing unique challenges and opportunities. By designing AI systems with security at their core and continuously monitoring and updating them, organizations can stay ahead of the most critical threats,” said Daniel Kendzior, global Data and AI Security Lead at Accenture. “Business resilience requires readiness to quickly response to disruptive forces and confidence in your organization’s ability to act effectively.”

The research also reveals widespread cybersecurity immaturity across regions, highlighting a critical gap between ambition and readiness. Only 14% of North American and 11% of European organizations have mature postures. In Latin America, 77% lack basic strategies and capabilities, while 71% of Asia-Pacific organizations remain in the “Exposed Zone,” facing serious operational and financial risk.

The research identifies three distinct security maturity zones based on an organization’s cybersecurity strategy and technical capabilities. The top group—which Accenture calls the “Reinvention Ready Zone” comprising only 10% of organizations—have an adaptive resilient security posture that continuously evolves to counter emerging threats. The middle 27% in the “Progressing Zone” show strength but struggle with defining strategic direction or implementing defenses. The most at-risk group, in the “Exposed Zone,” makes up 63% of organizations characterized by limited cyber readiness and a reactive posture to threats. These conditions are exacerbated by today’s complex AI environment and global risk factors.

Reinvention Ready companies, however, are 69% less likely to face advanced attacks and are 1.5 times more effective at blocking them. They also have 1.3 times greater visibility across IT and OT environments, have reduced technical debt by 8% and see a 15% boost in customer trust, demonstrating how stronger cybersecurity practices drive both resilience and business value.

Four critical actions necessary to reach the "Reinvention Ready Zone" are:

• Develop and deploy a fit-for-purpose security governance framework and operating model accounting for the realities of an AI-disrupted world to establish clear accountability and align AI security with regulatory and business objectives.
• Design a digital core to be generative AI secure from the outset by embedding security into AI development, deployment and operational processes.
• Maintain resilient AI systems with secure foundations that proactively address emerging threats, enhance detection capabilities, enable AI-model testing and improve response mechanisms.
• Reinvent cybersecurity with gen AI by leveraging it to automate security processes, strengthen cyber defenses and detect threats sooner.

You can explore the State of Cybersecurity Resilience 2025 report in Accenture Foresight, Accenture’s thought leadership app, which provides a personalized feed of all our latest reports, case studies, blogs, interactive data charts, podcasts and more. Download the app at http://www.accenture.com/foresight.

Methodology

Accenture Researched surveyed 2,286 executives—comprised of 80% chief information security officers and 20% chief information officers—from large organizations (revenues of >US$1 billion) in 24 industries across 17 countries in North and South America, Europe, Asia-Pacific, the Middle East and Africa. The survey was conducted online from end of October to December 2024. For more information on the methodology, including the development of the Security Posture Maturity and defining Security Zones, read the full report here.

About Accenture

Accenture is a leading global professional services company that helps the world’s leading businesses, governments and other organizations build their digital core, optimize their operations, accelerate revenue growth and enhance citizen services—creating tangible value at speed and scale. We are a talent- and innovation-led company with approximately 791,000 people serving clients in more than 120 countries. Technology is at the core of change today, and we are one of the world’s leaders in helping drive that change, with strong ecosystem relationships. We combine our strength in technology and leadership in cloud, data and AI with unmatched industry experience, functional expertise and global delivery capability. Our broad range of services, solutions and assets across Strategy & Consulting, Technology, Operations, Industry X and Song, together with our culture of shared success and commitment to creating 360° value, enable us to help our clients reinvent and build trusted, lasting relationships. We measure our success by the 360° value we create for our clients, each other, our shareholders, partners and communities. Visit us at accenture.com.

Accenture Security

Accenture Security is a leading provider of end-to-end cybersecurity services, including strategy, protection, resilience and industry-specific cyber services. We bring security innovation, coupled with global scale and a worldwide delivery capability through our network of Cyber Fusion Centers. Helped by our team of 27,000 highly skilled professionals, we enable clients to innovate safely, build cyber resilience and grow with confidence. Visit us at accenture.com/security.

Copyright © 2025 Accenture. All rights reserved. Accenture and its logo are registered trademarks of Accenture.

View source version on businesswire.com: https://www.businesswire.com/news/home/20250626539892/en/