AI Driving New Cyber Risk Landscape: AXIS Survey Compares CEO and CISO Views on AI’s Promise Versus its Unprecedented Risks

Core Insights - AXIS Capital's research highlights the transformative impact of artificial intelligence (AI) on the risk landscape, revealing differing perspectives between CEOs and CISOs regarding AI's risks and rewards [1][2] Group 1: AI's Impact on Cybersecurity - AI is recognized as a transformative force for data analytics and operational efficiency, but it also introduces new risks, including advanced cyber threats such as shadow AI and ransomware attacks [2] - The survey indicates that 93.5% of U.S. CEOs and 87.5% of U.S. CISOs believe AI delivers a return on investment (ROI) for cybersecurity, compared to 69.1% of U.K. CEOs and 74% of U.K. CISOs [4] - AI-driven attacks are perceived as the greatest emerging cyber threat, with 29.6% of U.S. executives and 20.8% of U.K. executives identifying them as a major concern [6] Group 2: Divergent Perspectives Between CEOs and CISOs - CEOs view AI as a driver of productivity and competitive advantage, while CISOs see it as a source of increased exposure, with 29.7% of CISOs less optimistic about AI strengthening cyber defenses compared to CEOs [5] - Confidence levels differ significantly, with 85% of U.S. leaders feeling prepared for AI threats, while only 44% of U.K. leaders share this confidence [6] - CEOs are more likely to believe their companies are prepared to respond to AI threats, with 60.2% expressing this view compared to 50.6% of CISOs [7] Group 3: Budget and Resource Allocation - Nearly 82% of respondents plan to increase their cybersecurity budgets in the next 12 months, while 75.2% are likely to reduce cybersecurity headcount due to productivity gains from AI tools [6] - A significant gap exists in the adoption of cyber insurance, with 94% of U.S. respondents carrying it compared to 68.4% of U.K. respondents [4] Group 4: Methodology and Demographics - The findings are based on a survey of 500 CEOs and CISOs from the U.S. and U.K., conducted from October 22–29, 2025, with respondents representing companies of at least 250 employees [9]