Qualitative study explores AI cybersecurity challenges in organizations, highlighting governance importance for security outcomes.
The rapid deployment of artificial intelligence (AI) systems across organizations has shown a critical disconnect between the pace of technological innovation and the maturity of cybersecurity governance. While AI systems are increasingly embedded in high-stakes organizational processes, the implementation of cybersecurity controls remains hindered by persistent structural, technical, and organizational challenges. This qualitative study draws on semi-structured interviews with 12 AI and cybersecurity professionals across the financial services, healthcare, cloud computing, and technology sectors to examine the challenges of implementing AI cybersecurity controls and the role of AI governance in securing AI systems and sensitive data. Thematic analysis identified five major challenge domains lack of standardized frameworks, AI development and cybersecurity team misalignment, tool and capability gaps, pace mismatch between innovation and governance, and regulatory ambiguity alongside four governance themes: formal AI governance structures and their limitations, compliance integration into the AI lifecycle, governance as a multiplier of security effectiveness, and the role of leadership accountability. The findings reveal that organizational and governance factors are at least as consequential as technical factors in determining AI security outcomes, and that bridging the gap between AI innovation and cybersecurity requires coordinated investment in governance, cross-functional collaboration, and implementation-level guidance.
No takes yet. Share an insight, caveat, or question.
Richard Antwi (2026) studied this question.
Synapse has enriched 5 closely related papers on similar clinical questions. Consider them for comparative context: