94% of healthcare organizations have begun updating security policies to address generative AI threats in email.

55% of organizations surveyed prioritize defending models and data from tampering.

75% of Pacesetters (the most AI-ready group) report having the capacity to fully secure agentic AI systems that make decisions independently.

75% of healthcare organizations say AI has added confusion, not clarity, to email compliance.

58% of healthcare organizations have not signed a BAA for an AI email tool so far.

43% of small companies (<100 employees) are concerned with the emergence of generative AI.

37% of organizations reported a lack of cybersecurity metrics as a challenge in using AI for cybersecurity.

Only 16% of healthcare organizations have trained most of their staff (75-100%) who have access to PHI on AI usage in email.

21% of respondents from healthcare organizations believe a Business Associate Agreement (BAA) isn’t required for an AI email assistant.

83% of healthcare IT and compliance leaders have raised concerns about AI security.

31% of organizations say their AI priority within cybersecurity is prioritizing defending new threats.

33% of organizations reported a lack of buy-in from senior leadership in using AI for cybersecurity.

70% of firms place themselves in an early education phase or a stage of testing AI implementation on low-priority systems.

52% of companies rate themselves as having high capability in AI.

52% of very large companies (10000+ employees) are concerned with the emergence of generative AI.

20% of organizations are implementing AI in high-priority systems.

9% of organizations have full integration of AI with modified workflow.

62% of healthcare IT and compliance leaders have observed staff experimenting with ChatGPT or similar tools even though they’re unsanctioned.

43% of organizations are in the early education/experiment phase of AI adoption.

70% of companies are in early stages of AI adoption.