Survey reveals staff use AI at work but lack policy awareness
A recent survey conducted by KnowBe4 across multiple countries has revealed a significant gap between the widespread use of Artificial Intelligence (AI) tools in the workplace and employees' awareness of company policies governing their use.
The study, which gathered responses from over 12,000 employees in Germany, South Africa, the Netherlands, France, the United Kingdom, and the United States, found that, on average, 60.2% of employees reported using AI tools at work. In contrast, only 18.5% indicated that they were aware of an official company policy on AI usage.
This disparity points to a lack of oversight and guidance with regards to the adoption of AI in organisational settings, leaving many companies facing potential operational and security risks associated with unsanctioned AI activity.
Risk of unregulated AI use
One in ten employees (10%) admitted to entering client data into an AI tool to complete a work task. This practice raises concerns around data security, privacy, and regulatory compliance, especially where organisational security teams have not vetted such tools.
"An AI governance gap is like a ticking time bomb for organizations. When the majority of your workforce is using AI but fewer than 20% understand the rules of engagement, you have a massive problem. AI tools are powerful, but without clear policies and training, employees may unknowingly feed sensitive information, like client data, into systems that were not designed to handle it securely. We often think of cyber risk as external, but in the age of AI, internal misuse, however unintentional, could lead to serious data breaches, compliance violations, and reputational damage," said Roger Grimes, Data-Driven Defence Evangelist at KnowBe4.
The survey highlights that the risk is not limited to external threats but also includes the internal misuse of AI due to lack of awareness and training within the workforce.
Regional differences
The research noted variations in AI adoption rates between countries. France recorded the lowest adoption, with 54.2% of employees using AI tools at work, indicating a slower uptake of the technology. Meanwhile, South Africa reported the highest rate at 70.1%, showing a more prevalent use of AI applications in the workplace.
Awareness of company AI policies also varied. An average of 14.4% of respondents across all surveyed regions reported being unaware of any AI policy in their workplace. The lack of awareness was particularly evident in the Netherlands (16.1%) and the UK (15.8%). The survey suggests that enhanced internal communication and training may be needed in these regions.
Authorised use remains limited
The findings show that only about 17% of employees use AI at work with the knowledge of their IT or security teams. Even in South Africa, where this figure was highest, only 23.6% of employees reported sanctioned use of AI tools. This trend indicates a limited adoption of approved AI solutions and highlights the need for organisations to provide and promote sanctioned tools for workplace use.
The research points to the importance of not only setting policies but also ensuring they are effectively communicated to employees. It emphasises the requirement for comprehensive training tailored to the ethical and secure use of AI tools. Additionally, providing employees with accessible, approved AI solutions is highlighted as a necessary step to address the risks associated with uncontrolled AI adoption.
The survey was conducted by Censuswide and included responses from employees who use computers as part of their job responsibilities. The broad scope of the research covered organisations from various sectors and regions, offering insight into global trends around workplace technology adoption and governance.
