OpenText Survey: Enterprises Rush into GenAI without Security Foundations
A joint survey by OpenText and Ponemon Institute reveals that while 52% of enterprises have adopted GenAI, many lack necessary security and governance foundations, with only 1 in 5 achieving true AI maturity.
📋 Article Processing Timeline
- 📰 Published: April 7, 2026 at 20:00
- 🔍 Collected: April 7, 2026 at 11:30
- 🤖 AI Analyzed: April 20, 2026 at 22:56 (323h 25m after Collected)
*This release is an abridged translation of the release announced by OpenText Corporation on March 23, 2026 (North American time).*
OpenText (NASDAQ: OTEX, TSX: OTEX, Japan subsidiary: Chiyoda-ku, Tokyo, President: Denise Miura) today announced the findings of a new global survey conducted in collaboration with the Ponemon Institute, titled "Managing Risks and Optimizing the Value of AI, GenAI & Agentic AI." According to the survey, while more than half of organizations (52%) have fully or partially adopted generative AI, their implementation of security and governance is lagging behind.
This gap highlights a growing industry challenge: while organizations are rapidly adopting generative AI, many are proceeding without the governance and security foundations necessary to manage its risks.
Muhi Majzoub, Executive Vice President, Product and Engineering at OpenText, stated, "AI maturity isn't just about deploying AI tools; it's about whether they are utilized responsibly. Security and governance form the foundation for extracting true value from AI. By embedding these into AI systems from the start, organizations can operate with greater transparency, continuously monitor systems, and trust the outcomes AI delivers."
Only 1 in 5 companies report reaching "AI maturity"—meaning they have fully implemented AI in cybersecurity activities and can assess security risks—and less than half (43%) have adopted a risk-based strategy for governing AI systems. As AI systems become more autonomous and embedded in critical operations, closing this maturity gap will be essential to ensure reliability, compliance, and long-term business value.
Only one out of five companies surveyed reported having reached "AI maturity," where AI is fully implemented in cybersecurity activities and security risks are appropriately evaluated. Furthermore, less than half of the companies (43%) have adopted a risk-based strategy for the governance of AI systems. As AI systems become more autonomous and are incorporated into critical business processes, resolving this maturity gap will be indispensable for ensuring reliability and compliance, and ultimately, for creating long-term business value.
**AI Security and Governance Are Lagging**
According to the survey, there is a significant disconnect between the pace of AI adoption and the measures required to manage and protect it effectively.
- Nearly 8 out of 10 organizations (79%) have not yet reached the "AI mature" stage, where systems are fully deployed and security risks are evaluated in the cybersecurity sector.
- Only 41% of organizations have formulated AI-specific data privacy policies.
- A majority of respondents (62%) [text cuts off, maintaining faithful translation of available text]...
OpenText (NASDAQ: OTEX, TSX: OTEX, Japan subsidiary: Chiyoda-ku, Tokyo, President: Denise Miura) today announced the findings of a new global survey conducted in collaboration with the Ponemon Institute, titled "Managing Risks and Optimizing the Value of AI, GenAI & Agentic AI." According to the survey, while more than half of organizations (52%) have fully or partially adopted generative AI, their implementation of security and governance is lagging behind.
This gap highlights a growing industry challenge: while organizations are rapidly adopting generative AI, many are proceeding without the governance and security foundations necessary to manage its risks.
Muhi Majzoub, Executive Vice President, Product and Engineering at OpenText, stated, "AI maturity isn't just about deploying AI tools; it's about whether they are utilized responsibly. Security and governance form the foundation for extracting true value from AI. By embedding these into AI systems from the start, organizations can operate with greater transparency, continuously monitor systems, and trust the outcomes AI delivers."
Only 1 in 5 companies report reaching "AI maturity"—meaning they have fully implemented AI in cybersecurity activities and can assess security risks—and less than half (43%) have adopted a risk-based strategy for governing AI systems. As AI systems become more autonomous and embedded in critical operations, closing this maturity gap will be essential to ensure reliability, compliance, and long-term business value.
Only one out of five companies surveyed reported having reached "AI maturity," where AI is fully implemented in cybersecurity activities and security risks are appropriately evaluated. Furthermore, less than half of the companies (43%) have adopted a risk-based strategy for the governance of AI systems. As AI systems become more autonomous and are incorporated into critical business processes, resolving this maturity gap will be indispensable for ensuring reliability and compliance, and ultimately, for creating long-term business value.
**AI Security and Governance Are Lagging**
According to the survey, there is a significant disconnect between the pace of AI adoption and the measures required to manage and protect it effectively.
- Nearly 8 out of 10 organizations (79%) have not yet reached the "AI mature" stage, where systems are fully deployed and security risks are evaluated in the cybersecurity sector.
- Only 41% of organizations have formulated AI-specific data privacy policies.
- A majority of respondents (62%) [text cuts off, maintaining faithful translation of available text]...