KnowBe4, the world-renowned cybersecurity platform that comprehensively addresses human risk management, shares new survey findings highlighting a severe AI governance gap. A new KnowBe4 survey of employees acrossย Germany,ย South Africa,ย the Netherlands,ย France, the UK, and the US reveals that while a large majority of employees already engage with Artificial Intelligence (AI) tools at work, a strikingly low percentage are aware of their company’s official policies governing its use.
Also Read: The Agentic AI Revolution: Top 5 Must-Have Agents for Telcos in 2025
The findings reveal that, on average, 60.2% of employees are using AI tools in the workplace. In contrast, only 18.5% are aware of their company’s policy on AI usage. This significant gap suggests that the vast majority of AI activity within organizations is taking place without guidance or oversight. One in 10 employees (10%) have admitted to putting client data into an AI tool to complete a work task.
“An AI governance gap is like a ticking time bomb for organizations,” saidย Roger Grimes, data-driven defense evangelist at KnowBe4. “When the majority of your workforce is using AI but fewer than 20% understand the rules of engagement, you have a massive problem. AI tools are powerful, but without clear policies and training, employees may unknowingly feed sensitive information, like client data, into systems that were not designed to handle it securely. We often think of cyber risk as external, but in the age of AI, internal misuse, however unintentional, could lead to serious data breaches, compliance violations, and reputational damage.”
Other Takeaways Across Regions
- Varying AI Adoption Rates:ย While the average percentage of employees using AI in the workplace is 60.2% globally, adoption rates varied by region.ย Franceย shows the lowest adoption rate, with only 54.2% of employees saying they use AI tools at work, indicating a slower adoption rate. Conversely,ย South Africaย records the highest at 70.1%, suggesting a more widespread use of AI.
- Persistent Policy Awareness Gaps:ย An average of 14.4% of employees reported being unaware of their company’s AI policy. This lack of awareness is particularly notable inย the Netherlandsย (16.1%) and the UK (15.8%), indicating a need for enhanced communication and training strategies.
- Sanctioned AI Use is Lagging:ย Only an average of 17% of employees use AI at work with their IT/security team’s knowledge. This figure, though highest inย South Africaย (23.6%), remains low overall, indicating a need for organizations to proactively provide and promote approved AI solutions.
The research emphasizes the critical need for organizations to bridge this awareness-usage gap. This requires not just establishing policies, but actively communicating them, providing comprehensive training on ethical and secure AI use, and offering approved, user-friendly AI tools to mitigate the significant risks posed by uncontrolled AI adoption.
Also Read:ย Why Cybersecurity-as-a-Service is the Future for MSPs and SaaS Providers
[To share your insights with us as part of editorial or sponsored content, please write toย psen@itechseries.com]
