The State of AI Security & Governance: 2025 Report
As generative and agentic AI move from pilot to production, mature governance has become the strongest predictor of organizational readiness. This CSA and Google Cloud Security report reveals how security leaders are stepping up as early adopters—using AI to strengthen defenses while building the frameworks necessary to manage critical data risks.
As generative and agentic AI move from pilot to production, mature governance has become the strongest predictor of organizational readiness. This CSA and Google Cloud Security report reveals how security leaders are stepping up as early adopters—using AI to strengthen defenses while building the frameworks necessary to manage critical data risks.
Download the report now
- (+1)
- Afghanistan
- Albania
- Algeria
- Andorra
- Angola
- Anguilla
- Antartide
- Antigua e Barbuda
- Arabia Saudita
- Argentina
- Armenia
- Aruba
- Australia
- Austria
- Azerbaigian
- Bahamas
- Bahrein
- Bangladesh
- Barbados
- Belgio
- Belize
- Benin
- Bermuda
- Bhutan
- Bielorussia
- Bolivia
- Bosnia ed Erzegovina
- Botswana
- Brasile
- Brunei
- Bulgaria
- Burkina Faso
- Burundi
- Cambogia
- Camerun
- Canada
- Capo Verde
- Cechia
- Ciad
- Cile
- Cina
- Cipro
- Città del Vaticano
- Colombia
- Comore
- Congo - Kinshasa
- Congo-Brazzaville
- Corea del Sud
- Costa Rica
- Costa d’Avorio
- Croazia
- Curaçao
- Danimarca
- Dominica
- Ecuador
- Egitto
- El Salvador
- Emirati Arabi Uniti
- Eritrea
- Estonia
- Eswatini
- Etiopia
- Figi
- Filippine
- Finlandia
- Francia
- Gabon
- Gambia
- Georgia
- Georgia del Sud e Sandwich Australi
- Germania
- Ghana
- Giamaica
- Giappone
- Gibilterra
- Gibuti
- Giordania
- Grecia
- Grenada
- Groenlandia
- Guadalupa
- Guam
- Guatemala
- Guinea
- Guinea Equatoriale
- Guinea-Bissau
- Guyana
- Guyana Francese
- Haiti
- Honduras
- Hong Kong
- India
- Indonesia
- Iraq
- Irlanda
- Islanda
- Isola Ascensione
- Isola Bouvet
- Isola Christmas
- Isola Norfolk
- Isole Cayman
- Isole Cocos (Keeling)
- Isole Cook
- Isole Falkland (Isole Malvine)
- Isole Fær Øer
- Isole Heard e McDonald
- Isole Marianne Settentrionali
- Isole Marshall
- Isole Minori Esterne degli Stati Uniti
- Isole Pitcairn
- Isole Salomone
- Isole Turks e Caicos
- Isole Vergini Americane
- Isole Vergini Britanniche
- Israele
- Italia
- Kazakistan
- Kenya
- Kirghizistan
- Kiribati
- Kuwait
- Laos
- Lesotho
- Lettonia
- Libano
- Liberia
- Libia
- Liechtenstein
- Lituania
- Lussemburgo
- Macao
- Macedonia del Nord
- Madagascar
- Malawi
- Malaysia
- Maldive
- Mali
- Malta
- Marocco
- Martinica
- Mauritania
- Mauritius
- Mayotte
- Messico
- Micronesia
- Moldavia
- Monaco
- Mongolia
- Montenegro
- Montserrat
- Mozambico
- Myanmar (Birmania)
- Namibia
- Nauru
- Nepal
- Nicaragua
- Niger
- Nigeria
- Niue
- Norvegia
- Nuova Caledonia
- Nuova Zelanda
- Oman
- Paesi Bassi
- Pakistan
- Palau
- Palestina
- Panama
- Papua Nuova Guinea
- Paraguay
- Perù
- Polinesia Francese
- Polonia
- Portogallo
- Portorico
- Qatar
- Regno Unito
- Repubblica Centrafricana
- Repubblica Dominicana
- Riunione
- Romania
- Ruanda
- Russia
- Sahara Occidentale
- Saint Kitts e Nevis
- Saint Lucia
- Saint Martin
- Saint Vincent e Grenadine
- Saint-Barthélemy
- Saint-Pierre e Miquelon
- Samoa
- Samoa Americane
- San Marino
- Sant’Elena
- Senegal
- Serbia
- Seychelles
- Sierra Leone
- Singapore
- Sint Maarten
- Slovacchia
- Slovenia
- Somalia
- Spagna
- Sri Lanka
- Stati Uniti
- Sud Sudan
- Sudafrica
- Suriname
- Svalbard e Jan Mayen
- Svezia
- Svizzera
- São Tomé e Príncipe
- Tagikistan
- Taiwan
- Tanzania
- Terre Australi Francesi
- Territorio Britannico dell’Oceano Indiano
- Thailandia
- Timor Est
- Togo
- Tokelau
- Tonga
- Trinidad e Tobago
- Tunisia
- Turchia
- Turkmenistan
- Tuvalu
- Ucraina
- Uganda
- Ungheria
- Uruguay
- Uzbekistan
- Vanuatu
- Venezuela
- Vietnam
- Wallis e Futuna
- Yemen
- Zambia
- Zimbabwe
This year’s research identifies several defining trends and performance gaps shaping the enterprise landscape:
The Maturity Multiplier: Organizations with formal governance are twice as likely to adopt agentic AI and three times as likely to train staff on AI security tools.
Security Leads the Way: Over 90% of security teams are testing or planning to use AI for threat detection, red teaming, and access control.
The Multi-Model Shift: Enterprises now use an average of 2.6 models. Learn why Gemini has captured 48% adoption as organizations leverage multi-model strategies to balance innovation with data governance and security risk.
Top Concerns: 52% of organizations cite sensitive data exposure as their primary security risk, far outweighing AI-specific threats like prompt injection.
Download the full report to benchmark your strategy and lead your organization’s AI transformation.
