--- title: CISOs say boardrooms still don’t grasp the human cyber... description: A MetaCompliance survey of 200 European CISOs reveals that over 75% believe their C-suite doesn't fully understand the cyber risk posed by employees.... canonical: https://daily.dev/posts/cisos-say-boardrooms-still-don-t-grasp-the-human-cyber-risk-ai-is-supercharging-frodr1fce twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: CISOs say boardrooms still don’t grasp the human cyber risk AI is supercharging | daily.dev og:description: A MetaCompliance survey of 200 European CISOs reveals that over 75% believe their C-suite doesn't fully understand the cyber risk posed by employees.... og:url: https://daily.dev/posts/cisos-say-boardrooms-still-don-t-grasp-the-human-cyber-risk-ai-is-supercharging-frodr1fce og:image: https://api.daily.dev/og/posts/FrODr1FCe.png og:image:alt: CISOs say boardrooms still don’t grasp the human cyber risk AI is supercharging og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # CISOs say boardrooms still don’t grasp the human cyber risk AI is supercharging **[IT Security Guru](https://daily.dev/sources/itsecurityguru)** · 3 min read · 0 upvotes · 0 comments ## Summary A MetaCompliance survey of 200 European CISOs reveals that over 75% believe their C-suite doesn't fully understand the cyber risk posed by employees. AI-enabled social engineering is the top reason CISOs feel less confident about resilience, with concerns spanning deepfake impersonation, staff feeding sensitive data into AI tools, and malicious insiders using AI for fraud. Nearly 80% say leadership enthusiasm for security awareness fades after initial pushes, and 76% struggle to align stakeholders on human-risk metrics. CISOs are calling for sustained executive engagement and real-time, contextual employee support rather than periodic training exercises. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What percentage of CISOs think their leadership doesn't understand employee-driven cyber risk? More than three-quarters of European CISOs believe their C-suite doesn't fully understand the cyber risk posed by their own employees. This comes from a survey of 200 CISOs across the UK, France, Germany and Sweden conducted by MetaCompliance, which also found 79% say leadership enthusiasm for security awareness programmes fades after the initial push. _Security leaders tracking how AI reshapes boardroom risk conversations can follow coverage like this on daily.dev._ ### How is AI changing the type of social engineering attacks organizations worry about most? AI-enabled social engineering has become the top reason CISOs feel less confident about cyber resilience than a year ago, cited by almost half of less-confident respondents. Over 40% worry AI is increasing the speed and impact of social engineering, 40% fear staff feeding sensitive data into generative AI tools, and 41% worry about malicious insiders using AI for fraud or data theft. _Teams weighing defenses against AI-driven social engineering can keep up with findings like these on daily.dev._ ### Which country's security leaders are most worried about deepfake impersonation attacks? UK CISOs flagged deepfake impersonation as a major threat more than any other country surveyed, with over half naming it a top concern. This was the highest figure recorded across the UK, France, Germany and Sweden in the MetaCompliance survey of 200 CISOs. _Anyone benchmarking deepfake threat concerns across regions can track this kind of research on daily.dev._ ## Similar posts on daily.dev - [What do CISOs need to rest easy about future AI risks?](https://daily.dev/posts/what-do-cisos-need-to-rest-easy-about-future-ai-risks--0dwxj9lpn) · CSO Online · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#phishing](https://daily.dev/tags/phishing), [#ai-security](https://daily.dev/tags/ai-security) [View this post on daily.dev](https://daily.dev/posts/cisos-say-boardrooms-still-don-t-grasp-the-human-cyber-risk-ai-is-supercharging-frodr1fce) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"CISOs say boardrooms still don’t grasp the human cyber risk AI is supercharging","url":"https://daily.dev/posts/cisos-say-boardrooms-still-don-t-grasp-the-human-cyber-risk-ai-is-supercharging-frodr1fce","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/cisos-say-boardrooms-still-don-t-grasp-the-human-cyber-risk-ai-is-supercharging-frodr1fce"},"datePublished":"2026-07-17T10:49:24.164Z","dateModified":"2026-09-14T08:19:59.991Z","description":"A MetaCompliance survey of 200 European CISOs reveals that over 75% believe their C-suite doesn't fully understand the cyber risk posed by employees....","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/81b32b6a14fe5bc91612f62f9a655326?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/81b32b6a14fe5bc91612f62f9a655326?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"IT Security Guru","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"IT Security Guru","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/ae9fe7d07c814192b35f86ad698fb374","url":"https://daily.dev/sources/itsecurityguru"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/cisos-say-boardrooms-still-don-t-grasp-the-human-cyber-risk-ai-is-supercharging-frodr1fce","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,phishing,ai-security","timeRequired":"PT3M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"IT Security Guru","item":"https://daily.dev/sources/itsecurityguru"},{"@type":"ListItem","position":3,"name":"CISOs say boardrooms still don’t grasp the human cyber risk AI is supercharging"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/cisos-say-boardrooms-still-don-t-grasp-the-human-cyber-risk-ai-is-supercharging-frodr1fce#faq","mainEntity":[{"@type":"Question","name":"What percentage of CISOs think their leadership doesn't understand employee-driven cyber risk?","acceptedAnswer":{"@type":"Answer","text":"More than three-quarters of European CISOs believe their C-suite doesn't fully understand the cyber risk posed by their own employees. This comes from a survey of 200 CISOs across the UK, France, Germany and Sweden conducted by MetaCompliance, which also found 79% say leadership enthusiasm for security awareness programmes fades after the initial push. Security leaders tracking how AI reshapes boardroom risk conversations can follow coverage like this on daily.dev."}},{"@type":"Question","name":"How is AI changing the type of social engineering attacks organizations worry about most?","acceptedAnswer":{"@type":"Answer","text":"AI-enabled social engineering has become the top reason CISOs feel less confident about cyber resilience than a year ago, cited by almost half of less-confident respondents. Over 40% worry AI is increasing the speed and impact of social engineering, 40% fear staff feeding sensitive data into generative AI tools, and 41% worry about malicious insiders using AI for fraud or data theft. Teams weighing defenses against AI-driven social engineering can keep up with findings like these on daily.dev."}},{"@type":"Question","name":"Which country's security leaders are most worried about deepfake impersonation attacks?","acceptedAnswer":{"@type":"Answer","text":"UK CISOs flagged deepfake impersonation as a major threat more than any other country surveyed, with over half naming it a top concern. This was the highest figure recorded across the UK, France, Germany and Sweden in the MetaCompliance survey of 200 CISOs. Anyone benchmarking deepfake threat concerns across regions can track this kind of research on daily.dev."}}]} ```