A new survey from corporate insurer Axis Capital has revealed a significant and growing divide between CEOs and Chief Information Security Officers (CISOs) regarding the risks and rewards of artificial intelligence in cybersecurity. The study, which included 250 CEOs and CISOs from the US and the UK, highlights a fundamental mismatch in priorities and confidence levels as AI rapidly reshapes the threat landscape.
The core disagreement centers on how leadership views AI's primary function. CEOs largely perceive AI as a tool for enhancing productivity and gaining a competitive edge. In contrast, CISOs are more focused on the emerging risks, including increased exposure to data breaches, misuse of internal AI tools, and a broader attack surface created by rapid adoption. Vincent Tizzio, CEO of Axis, emphasized to CNBC that AI represents more than a technical challenge; it introduces a specific set of responsibilities and governance issues for corporate boards and executives.
A clear confidence gap underscores this division. When asked if they were confident AI would strengthen their company's cybersecurity, 19.5% of CEOs expressed a lack of confidence. That figure rose sharply to 30% among CISOs, who are on the front lines of daily threat management and more acutely aware of the potential for data leaks and new vulnerabilities introduced by AI systems.
Geographical preparedness also varies starkly. The survey found that 85% of US CEOs feel prepared for AI-related threats, while only 44% of their UK counterparts share that sentiment. This regional contrast may reflect differing paces of AI adoption, risk assessment frameworks, or internal security readiness.
Despite these concerns and the internal divide, cybersecurity budgets are set to rise. Driven by a near-doubling of ransomware attacks over the past two years, 82% of executives plan to increase their security spending in the next 12 months. Tizzio noted that defending against digital threats is now a staple in every conversation about corporate health, indicating that AI is seen as part of the solution but not a replacement for sustained investment in governance, controls, and security strategies.
The findings are corroborated by the World Economic Forum's (WEF) Global Cybersecurity Outlook 2026, released on January 12, which confirms a deepening leadership rift. The WEF report notes that 94% of leaders believe AI will be the main driver of cybersecurity progress this year, yet there is a misalignment in threat perception: CEOs are now more worried about cyber-enabled fraud, while security leaders remain focused on operational threats like ransomware and emerging AI-driven schemes like identity theft.
