The State of AI Security & Governance: 2025 Report
As generative and agentic AI move from pilot to production, mature governance has become the strongest predictor of organizational readiness. This CSA and Google Cloud Security report reveals how security leaders are stepping up as early adopters—using AI to strengthen defenses while building the frameworks necessary to manage critical data risks.
As generative and agentic AI move from pilot to production, mature governance has become the strongest predictor of organizational readiness. This CSA and Google Cloud Security report reveals how security leaders are stepping up as early adopters—using AI to strengthen defenses while building the frameworks necessary to manage critical data risks.
Download the report now
- (+1)
- Afganistán
- Albania
- Alemania
- Andorra
- Angola
- Anguila
- Antigua y Barbuda
- Antártida
- Arabia Saudita
- Argelia
- Argentina
- Armenia
- Aruba
- Australia
- Austria
- Azerbaiyán
- Bahamas
- Bangladés
- Barbados
- Baréin
- Belice
- Benín
- Bermudas
- Bielorrusia
- Bolivia
- Bosnia-Herzegovina
- Botsuana
- Brasil
- Brunéi
- Bulgaria
- Burkina Faso
- Burundi
- Bután
- Bélgica
- Cabo Verde
- Camboya
- Camerún
- Canadá
- Catar
- Chad
- Chequia
- Chile
- China
- Chipre
- Ciudad del Vaticano
- Colombia
- Comoras
- Corea del Sur
- Costa Rica
- Costa de Marfil
- Croacia
- Curazao
- Dinamarca
- Dominica
- Ecuador
- Egipto
- El Salvador
- Emiratos Árabes Unidos
- Eritrea
- Eslovaquia
- Eslovenia
- España
- Estados Unidos
- Estonia
- Esuatini
- Etiopía
- Filipinas
- Finlandia
- Fiyi
- Francia
- Gabón
- Gambia
- Georgia
- Ghana
- Gibraltar
- Granada
- Grecia
- Groenlandia
- Guadalupe
- Guam
- Guatemala
- Guayana Francesa
- Guinea
- Guinea Ecuatorial
- Guinea-Bisáu
- Guyana
- Haití
- Honduras
- Hong Kong
- Hungría
- India
- Indonesia
- Irak
- Irlanda
- Isla Ascensión
- Isla Bouvet
- Isla Norfolk
- Isla de Navidad
- Islandia
- Islas Caimán
- Islas Cocos
- Islas Cook
- Islas Feroe
- Islas Georgia del Sur y Sándwich del Sur
- Islas Heard y McDonald
- Islas Malvinas (Islas Falkland)
- Islas Marianas del Norte
- Islas Marshall
- Islas Pitcairn
- Islas Salomón
- Islas Turcas y Caicos
- Islas Ultramarinas de EE.UU.
- Islas Vírgenes Británicas
- Islas Vírgenes de EE. UU.
- Israel
- Italia
- Jamaica
- Japón
- Jordania
- Kazajistán
- Kenia
- Kirguistán
- Kiribati
- Kuwait
- Laos
- Lesoto
- Letonia
- Liberia
- Libia
- Liechtenstein
- Lituania
- Luxemburgo
- Líbano
- Macao
- Macedonia del Norte
- Madagascar
- Malasia
- Malaui
- Maldivas
- Mali
- Malta
- Marruecos
- Martinica
- Mauricio
- Mauritania
- Mayotte
- Micronesia
- Moldavia
- Mongolia
- Montenegro
- Montserrat
- Mozambique
- Myanmar (Birmania)
- México
- Mónaco
- Namibia
- Nauru
- Nepal
- Nicaragua
- Nigeria
- Niue
- Noruega
- Nueva Caledonia
- Nueva Zelanda
- Níger
- Omán
- Pakistán
- Palaos
- Palestina
- Panamá
- Papúa Nueva Guinea
- Paraguay
- Países Bajos
- Perú
- Polinesia Francesa
- Polonia
- Portugal
- Puerto Rico
- Reino Unido
- República Centroafricana
- República Democrática del Congo
- República Dominicana
- República del Congo
- Reunión
- Ruanda
- Rumania
- Rusia
- Samoa
- Samoa Americana
- San Bartolomé
- San Cristóbal y Nieves
- San Marino
- San Martín
- San Pedro y Miquelón
- San Vicente y las Granadinas
- Santa Elena
- Santa Lucía
- Santo Tomé y Príncipe
- Senegal
- Serbia
- Seychelles
- Sierra Leona
- Singapur
- Sint Maarten
- Somalia
- Sri Lanka
- Sudáfrica
- Sudán del Sur
- Suecia
- Suiza
- Surinam
- Svalbard y Jan Mayen
- Sáhara Occidental
- Tailandia
- Taiwán
- Tanzania
- Tayikistán
- Territorio Británico del Océano Índico
- Territorios Australes Franceses
- Timor Oriental
- Togo
- Tokelau
- Tonga
- Trinidad y Tobago
- Turkmenistán
- Turquía
- Tuvalu
- Túnez
- Ucrania
- Uganda
- Uruguay
- Uzbekistán
- Vanuatu
- Venezuela
- Vietnam
- Wallis y Futuna
- Yemen
- Yibuti
- Zambia
- Zimbabue
This year’s research identifies several defining trends and performance gaps shaping the enterprise landscape:
The Maturity Multiplier: Organizations with formal governance are twice as likely to adopt agentic AI and three times as likely to train staff on AI security tools.
Security Leads the Way: Over 90% of security teams are testing or planning to use AI for threat detection, red teaming, and access control.
The Multi-Model Shift: Enterprises now use an average of 2.6 models. Learn why Gemini has captured 48% adoption as organizations leverage multi-model strategies to balance innovation with data governance and security risk.
Top Concerns: 52% of organizations cite sensitive data exposure as their primary security risk, far outweighing AI-specific threats like prompt injection.
Download the full report to benchmark your strategy and lead your organization’s AI transformation.
