Does your org’s security team include anyone with a background in data science?
Yes - one person34%
Yes - multiple people 51%
No11%
I don’t know - show results2%
119 PARTICIPANTS
Yes - one person34%
Yes - multiple people 51%
No11%
I don’t know - show results2%
Direct report10%
125%
233%
320%
48%
>52%
A) Fully Prepared - We have AI-specific threat detection, monitoring of AI API usage, and updated incident response procedures for AI-assisted attacks33%
B) Partially Prepared - We’re monitoring some AI services and have basic awareness, but lack comprehensive AI threat modeling and detection capabilities35%
C) Early Assessment - We’ve identified the risk and are evaluating AI security frameworks (MITRE ATLAS, CSA MAESTRO, OWASP AI guides) but haven’t implemented controls yet26%
D) Unprepared - We haven’t specifically addressed AI-powered threats in our security strategy or implemented AI-focused monitoring4%
No selling.
No recruiting.
No self promotion.
Rules of EngagementFAQsPrivacy
© 2026 Gartner, Inc. and/or its affiliates. All rights reserved.
These results are super interesting and not at all what I expected. I wonder if respondents are including fraud analysis and similar roles. I may need to update my thinking on what a security team is.