CompTIA: Enterprise AI Shifts From Adoption to Managing Execution Risk
The main challenge for companies using AI is no longer adoption but execution, according to new CompTIA research. The IT training and certification group says governance, cybersecurity and workforce readiness are becoming the factors that decide whether AI projects deliver long-term business value.
- CompTIA says enterprise AI focus is shifting from adoption to execution risk.
- About six in 10 organizations are moving toward enterprise-wide AI implementation, per CompTIA's Corporate AI Adoption report.
- Cybersecurity ranks as the second-largest challenge to AI adoption, behind balancing human employees and AI tools.
- 98% of surveyed companies cited risk management, 96% data protection and privacy, and 95% governance as important in AI policies.
- 48% of organizations say cybersecurity will be a key focus of AI spending, matching the share planning AI training investment.
From experimentation to enterprise-wide use
CompTIA's research brief "Practical Implications of AI Safety" argues that as AI moves into core business operations, attention is turning from adoption to execution risk. "Enterprise AI has entered a new stage of maturity," said Seth Robinson, vice president, research, at CompTIA.
The brief draws on CompTIA's "Corporate AI Adoption" report. According to that report, about six in 10 organizations are moving away from experimentation and individual productivity use cases toward enterprise-wide implementation.
The same survey found that cybersecurity concerns rank as the second-largest challenge to AI adoption. Only finding the right balance between human employees and AI-powered tools and agents ranked higher.
Security elements in AI policies
Companies surveyed by CompTIA widely acknowledged the need for security-related elements in their AI policies:
- 98% cited the importance of risk management
- 96% cited data protection and privacy
- 95% cited governance
On spending, 48% of organizations say cybersecurity will be a key focus of their AI investment. The same percentage plans to invest in employee AI training.
Three priorities for the next phase
CompTIA has identified three priorities for businesses as they move into the next phase of AI adoption.
- Align AI strategy with existing governance frameworks. Organizations should build AI policies and decision-making processes on existing governance, compliance and risk-management practices.
- Build resilient decision-making structures. Cross-functional collaboration among IT, security, legal, compliance and business stakeholders can help organizations adapt as AI technologies, regulations and best practices evolve.
- Invest in workforce readiness. Successful implementation depends on both technical and organizational capabilities. Companies must address AI and cybersecurity skill gaps while strengthening foundational technology competencies.
What it means for businesses
CompTIA's message is that safety and governance work should not be treated as a box-ticking exercise. "AI safety, governance and workforce development are becoming competitive advantages rather than compliance exercises," Robinson said.
He added that organizations applying the same discipline to AI that they apply to cybersecurity and digital transformation "will be better positioned to capture business value while managing emerging risks." For companies scaling AI beyond pilot projects, the findings point to security, policy and training as areas that are drawing both attention and planned budget.
The "Practical Implications of AI Safety" research brief is available from CompTIA.
