AI Incident Response Readiness Lags Behind AI Adoption, ISACA Finds
ISACA finds 71% of organizations have never rehearsed an AI-related security incident.
ISACA's 2026 State of Cyber report says 71% of organizations have not run AI incident response exercises, only 3% have mature AI-specific runbooks, and 30% have not started. Adoption is ahead of preparation: 37% use AI to automate threat detection and response, 35% for routine security tasks, and 29% for endpoint security. Among European respondents, 38% reported more attacks than a year earlier, social engineering was the most common attack at 46%, and 54% expect an incident within 12 months. Workforce strain is also high, with 72% saying the job is more stressful than five years ago and 56% reporting understaffed teams.
- 71% of organizations have not rehearsed AI incident response.
- Only 3% have mature formal AI-specific runbooks.
- 37% use AI to automate threat detection and response.
- Social engineering was the top attack, cited by 46%.
- 56% report understaffed teams and 72% higher job stress.
- Products
- CMMI AI Maturity Model
- Organizations
- ISACACMMI Institute
From the original article
2 min read at infosecurity-magazine.com
A new report by ISACA found that 71% of orgs have not run AI incident response exercises as teams face rising pressure
By Alessandro Mascellino · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.