---
title: "AI, compliance, suppliers… CISOs called on to arbitrate the unmanageable — Marsanne Studio AI watch"
description: "A CESIN survey shows that enterprise adoption of generative AI is running ahead of the establishment of governance and usage policies."
url: "https://marsanne.studio/en/ai-watch/ai-compliance-suppliers-cisos-called-on-to-arbitrate-the-0a9c32/"
lang: "en"
---

[Marsanne Studio](https://marsanne.studio/en/)

[← Back to home](https://marsanne.studio/en/ai-watch)

[← The AI watch](https://marsanne.studio/en/ai-watch)

Data study · 21 September 2026

# AI, compliance, suppliers… CISOs called on to arbitrate the unmanageable

Original title, in French: “IA, conformité, fournisseurs… les RSSI sommés d’arbitrer l’ingérable”

**Publication**

Alliancy (France)

**Author**

Fiona Slous

**Published on**

21 September 2026 · read in the page structured data

## Summary

CESIN ran 21 weekly surveys among its CISO members in the first half of 2026, published on 16 September. On generative AI, 27% of respondents have not defined any usage policy and only 18% have a specific framework for developers using AI-enhanced environments. The survey also highlights differing priorities on regulatory compliance depending on organisation size, as well as issues relating to the Cyber Resilience Act, post-quantum and the consolidation of the cyber supplier market. CESIN describes a CISO role whose scope is widening without its capacity to arbitrate keeping pace, with 31% of respondents considering joining the board for lack of the ability to act.

Summary based on the full text of the article.

[Read the article on Alliancy →](https://alliancy.fr/ia-conformite-fournisseurs-les-rssi-sommes-darbitrer-lingerable-c7f6fa59-f3d5-4f3e-976b-882cc410ee71)

## Figures cited

-   27 %
    
    Share of CISOs with no generative AI usage policy
    
    CESIN members, first half of 2026
    
    > « 27 % n’ont encore défini aucune politique d’usage. »
    
    Source: CESIN
    
-   18 %
    
    Share of CISOs with a framework for developers using AI-enhanced environments
    
    CESIN members, first half of 2026
    
    > « Seuls 18 % des sondés disposent d’un cadre spécifique pour les développeurs utilisant des environnements enrichis à l’IA. »
    
    Source: CESIN
    

## Classification

**Country**

France

**Company size**

Micro-businesses, SMEs, Mid-sized companies, Large companies

**Industries**

All industries, or industry not specified

**Companies**

CESIN (study author)

**Keywords**

CISO, AI governance, generative AI, cybersecurity, compliance, CESIN

Entry written by Marsanne Studio from the cited article, with the help of an AI model (claude-sonnet-5). The rights to the article and its illustrations belong to Alliancy and its author. Entry translated from French by Claude Sonnet 5.5.