Majority of Indian firms unprepared for AI-era cyber threats, reveals Accenture report

The “State of Cyber Security Resilience 2025” study shows 92% of Indian firms lack cyber maturity, with 81% falling in the “Exposed Zone” and only 19% implementing vital measures such as encryption, access controls, and AI system monitoring

As artificial intelligence reshapes enterprise operations, a new report by Accenture warns that the vast majority of Indian organisations remain critically underprepared to secure their digital future. According to the “State of Cyber Security Resilience 2025” study, 92% of companies in India lack the cyber maturity required to tackle AI-driven threats.

The report places 81% of Indian firms in the “Exposed Zone,” a category defined by weak cyber strategies and limited technical defences. Only 19% have adopted the essential security practices needed to protect sensitive data, AI models, and cloud-based infrastructure. This includes foundational steps such as implementing encryption, access controls, and maintaining inventories of AI systems to monitor potential supply chain risks.

Despite growing adoption of generative AI (GenAI) technologies, just 19% of organisations in India have established clear usage policies or employee training programmes. This lack of governance, combined with insufficient data protection measures, leaves businesses vulnerable to increasingly sophisticated cyber threats.

“In India’s fast-evolving digital economy, the AI revolution is rewriting the rules of cyber security,” said Gautam Kapoor, Managing Director and Cyber Security Lead at Accenture India. “As generative AI accelerates innovation, it also amplifies risk. Cyber resilience must be embedded into every AI initiative.”

Three tiers of cyber readiness

Accenture’s research categorises firms globally into three cyber maturity levels: Reinvention Ready (8%), Progressing (11%), and Exposed (81%). While Reinvention Ready companies continuously evolve to defend against advanced threats, those in the Exposed category typically adopt a reactive stance, which is ill-suited to today’s complex threat environment.

The global survey—covering over 2,200 cyber security and technology leaders—reveals that only 10% of organisations worldwide are adequately prepared to defend against AI-enhanced attacks. However, Reinvention Ready companies experience 69% fewer advanced breaches, have 1.3 times better visibility across IT and OT systems, and see a 15% increase in customer trust.

To improve their resilience, Accenture recommends four key actions: implement AI-aligned governance frameworks, build GenAI-secure digital cores, maintain resilient AI infrastructure, and harness AI to automate and enhance security operations.

As AI accelerates transformation, Accenture’s report serves as a wake-up call for Indian enterprises to prioritise cyber readiness—not just as a technical function, but as a core business strategy.