Data study ·
AI, compliance, suppliers… CISOs called on to arbitrate the unmanageable
Original title, in French: “IA, conformité, fournisseurs… les RSSI sommés d’arbitrer l’ingérable”
- Publication
- Alliancy (France)
- Author
- Fiona Slous
- Published on
- 21 September 2026 · read in the page structured data
Summary
CESIN ran 21 weekly surveys among its CISO members in the first half of 2026, published on 16 September. On generative AI, 27% of respondents have not defined any usage policy and only 18% have a specific framework for developers using AI-enhanced environments. The survey also highlights differing priorities on regulatory compliance depending on organisation size, as well as issues relating to the Cyber Resilience Act, post-quantum and the consolidation of the cyber supplier market. CESIN describes a CISO role whose scope is widening without its capacity to arbitrate keeping pace, with 31% of respondents considering joining the board for lack of the ability to act.
Summary based on the full text of the article.
Read the article on Alliancy →Figures cited
-
27 %
Share of CISOs with no generative AI usage policy
CESIN members, first half of 2026
« 27 % n’ont encore défini aucune politique d’usage. »
Source: CESIN
-
18 %
Share of CISOs with a framework for developers using AI-enhanced environments
CESIN members, first half of 2026
« Seuls 18 % des sondés disposent d’un cadre spécifique pour les développeurs utilisant des environnements enrichis à l’IA. »
Source: CESIN
Classification
- Country
- France
- Company size
- Micro-businesses, SMEs, Mid-sized companies, Large companies
- Industries
- All industries, or industry not specified
- Companies
- CESIN (study author)
- Keywords
- CISO, AI governance, generative AI, cybersecurity, compliance, CESIN
Entry written by Marsanne Studio from the cited article, with the help of an AI model (claude-sonnet-5). The rights to the article and its illustrations belong to Alliancy and its author. Entry translated from French by Claude Sonnet 5.5.