CompTIA Research: AI Governance, Cybersecurity and Workforce Training Become Priorities for Businesses
New research from CompTIA highlights a shift in enterprise artificial intelligence adoption, with organisations increasingly focusing on governance, cybersecurity and workforce readiness rather than simply introducing new AI tools.
Published on 15 October 2026, CompTIA's latest research brief, Practical Implications of AI Safety, examines the operational challenges businesses face as artificial intelligence becomes more deeply embedded in their activities.
The findings suggest that successful AI adoption increasingly depends on organisational capabilities, particularly managing risks, protecting information and developing employees' skills.
For organisations in Qatar and across the Gulf Cooperation Council (GCC), the research raises important questions about how effectively existing governance and training arrangements support AI adoption.
AI Adoption Is Moving Beyond Experimentation
According to CompTIA's research, approximately six in ten organisations are moving from experimental AI applications and individual productivity tools towards broader enterprise implementation.
This transition introduces challenges that extend beyond technology procurement.
Businesses must consider how AI systems interact with existing infrastructure, how information is protected and how employees retain appropriate oversight of AI-assisted processes.
CompTIA identifies cybersecurity as the second-largest challenge to organisational AI adoption, behind balancing human employees with AI-powered tools and agents.
The research suggests that organisations increasingly recognise that implementing AI successfully requires changes to governance arrangements, operating procedures and workforce capabilities.
98% of Organisations Recognise the Importance of AI Risk Management
One of the findings concerns the importance businesses attach to AI governance and security.
Among surveyed organisations:
98% identified risk management as important within organisational AI policies.
96% highlighted data protection and privacy.
95% recognised the importance of governance.
48% identified cybersecurity as a key focus for AI investment.
48% also identified employee AI training as an investment priority.
These findings indicate considerable awareness of the organisational responsibilities associated with AI adoption.
However, recognising the importance of governance does not necessarily mean that organisations have implemented effective policies, controls or oversight arrangements.
CompTIA's findings therefore provide an opportunity for businesses to examine whether their existing governance capabilities are keeping pace with technological change.
Why Cybersecurity and AI Governance Must Develop Together
Artificial intelligence introduces new considerations for information security.
AI systems may process confidential information, interact with existing business applications and support decisions affecting customers, employees and organisational operations.
Organisations consequently need to understand how AI is being used, what information it can access and who remains accountable for its outputs.
Traditional cybersecurity controls remain important, but organisations may also need additional capabilities relating to AI risk assessment, model oversight and responsible deployment.
CompTIA recommends that businesses build AI governance on their existing risk management, compliance and cybersecurity arrangements rather than developing disconnected approaches.
This supports a more coordinated approach involving IT professionals, security teams, legal departments, compliance specialists and business leaders.
Workforce Training Is Becoming Central to AI Implementation
The findings also highlight the importance of workforce readiness.
Organisations adopting AI must ensure that employees understand not only how to operate AI tools but also how to recognise their limitations and associated risks.
This requires different levels of training across the organisation.
Senior executives need to understand the strategic and governance implications of AI adoption.
IT and cybersecurity professionals require more specialised capabilities in securing systems, managing access and evaluating emerging threats.
Employees using AI in their everyday responsibilities need practical knowledge of appropriate use, information protection and the importance of checking AI-generated outputs.
Training should therefore be considered part of an organisation's AI implementation strategy rather than an activity undertaken after new systems have been introduced.
What Does This Mean for Organisations in Qatar and the GCC?
Although CompTIA's research is not presented as a GCC-specific survey, its findings offer useful considerations for organisations across Qatar, Saudi Arabia, the UAE, Bahrain, Kuwait and Oman.
Businesses introducing artificial intelligence should evaluate whether their existing governance arrangements adequately address the risks associated with AI-enabled operations.
This may include reviewing internal AI policies, assigning accountability for AI-related decisions and ensuring appropriate safeguards for confidential and personal information.
Organisations should also consider the professional development needs of employees responsible for adopting, supervising and securing AI systems.
These are recommendations for organisational good practice. CompTIA's research does not establish new legal obligations for businesses in Qatar or elsewhere in the GCC.
Building AI Governance and Cybersecurity Capabilities
The research reinforces the importance of professional development as organisations move towards more widespread AI implementation.
MENA Executive Training supports organisations across Qatar and the wider GCC through professional training and certification programmes covering cybersecurity, artificial intelligence governance, data protection and information security management.
Relevant professional development pathways include CompTIA cybersecurity qualifications, the IAPP Artificial Intelligence Governance Professional (AIGP) certification and training in ISO/IEC 42001 AI management systems.
By developing these capabilities, organisations can strengthen their ability to identify risks, establish effective oversight and integrate AI technologies into existing business operations.
For organisations investing in artificial intelligence, workforce readiness and effective governance should develop alongside technological adoption.
