Artificial intelligence is reshaping cybersecurity faster than many companies can adjust their defences. It is helping organisations spot threats earlier, automate responses, and patch vulnerabilities more quickly.
But the same tools are also being used by cybercriminals to scale attacks, create smarter phishing, and exploit weaknesses at speed.
A new survey from corporate insurer Axis Capital highlights how this shift is creating a noticeable divide inside the leadership team.
The findings show CEOs and chief information security officers (CISOs) are increasingly approaching AI with different priorities, even though they are focused on the same business risk.
What Axis Capital’s survey found
Copy link to section
Axis Capital surveyed 250 CEOs and CISOs across the US and UK on how AI is changing cyber risk.
The study found that CEOs tend to see AI as a pathway to productivity gains and competitive advantage, while CISOs are more likely to focus on the risks that come with deploying powerful new systems.
This includes rising exposure to data leaks, misuse of internal tools, and a wider set of attack opportunities created by rapid adoption. In simple terms, the technology that makes companies faster can also make a breach more damaging.
Why is confidence lower among CISOs
Copy link to section
One of the clearest gaps is in confidence. Axis found that 19.5% of CEOs said they were not confident AI would strengthen their company’s cybersecurity. Among CISOs, that figure rose to 30%.
This difference is not surprising when you consider who lives closest to the day-to-day threat environment.
CISOs are often the first to see how new AI systems can create unknowns, such as sensitive data entering external models, weaker controls over employee use, or new vulnerabilities introduced by automation.
US versus UK preparedness is not the same
Copy link to section
The survey also showed a sharp regional contrast. While 85% of US leaders said they felt prepared for AI-related threats, only 44% of UK leaders said they felt prepared.
Axis found AI is generally viewed positively on both sides of the Atlantic, but UK respondents were more cautious.
That may reflect differences in how businesses assess cyber risk, how quickly firms are adopting AI tools, or the level of internal readiness to secure them.
Why companies are raising cyber budgets now
Copy link to section
Even with mixed confidence levels, cyber spending is moving higher.
The survey noted ransomware attacks have nearly doubled over the past two years, keeping cyber risk near the top of boardroom agendas.
Axis found that 82% of executives plan to increase their cybersecurity budgets over the next 12 months.
This suggests businesses see AI as part of the solution, but not a substitute for investment.
Tools may evolve rapidly, but companies still need stronger governance, better controls, and updated security strategies to keep up.
