Unapproved AI tools can expose sensitive business data, highlighting the need for stronger security controls and responsible AI adoption.
Dubai, United Arab Emirates, November 2026 — Cisco, the worldwide leader in networking and security, has highlighted the growing cybersecurity risks linked to shadow AI, as businesses increasingly use artificial intelligence tools outside approved enterprise systems.
As organizations across the UAE expand their use of AI, employees are turning to generative AI applications to improve productivity and automate daily tasks. However, using these tools without proper security controls can expose sensitive business information and create security gaps that are difficult to detect and manage.
According to research cited by Cisco, organizations with high levels of shadow AI experienced data breach costs averaging $670,000 more than those with little or no shadow AI. The research also found that 97% of organizations that experienced an AI-related security incident lacked proper AI access controls.
Fady Younes, Managing Director, Cybersecurity, Cisco Middle East, Türkiye, Africa, Caucasus and Central Asia (METAC), said: “AI is helping businesses work more efficiently and unlock new opportunities. However, without the right security measures, unauthorized AI tools can expose sensitive data and create risks that organizations may not be aware of. Businesses need clear policies, strong access controls and better visibility into how AI is used. This will help them protect their systems while allowing employees to use AI safely and effectively.”
Strengthening Security as AI Adoption Expands:
As AI tools become more integrated into daily business operations, Cisco emphasizes the importance of extending existing cybersecurity practices to address emerging risks. This is particularly important as AI systems gain greater access to enterprise data and become capable of performing tasks independently.
Cisco outlines three key priorities to help organizations manage shadow AI risks:
- Improve visibility into AI usage: Identify and monitor AI applications used across the organization, including unauthorized tools, personal accounts and browser extensions. This can help security teams detect potential risks and understand how employees are using AI.
- Strengthen access controls and data protection: Limit access to sensitive information and apply clear data protection policies. Organizations should ensure that AI tools and systems only access the information needed to perform their intended tasks.
- Establish clear AI governance policies: Introduce practical guidelines for AI use, supported by regular monitoring and risk assessments. Providing employees with approved AI tools can also reduce reliance on unauthorized applications.
Cisco highlights that securing AI adoption does not require organizations to restrict innovation. Instead, businesses should provide employees with trusted tools and clear guidance to support productivity without compromising security.
While AI introduces new cybersecurity challenges, it also offers opportunities to strengthen security operations. Cisco emphasizes that organizations must balance innovation with effective safeguards, ensuring they can benefit from AI while maintaining visibility and control.
By integrating AI governance into their wider cybersecurity strategies, organizations can better protect sensitive information, manage emerging threats and support responsible AI adoption.
