{"id":30396,"date":"2026-06-18T10:05:03","date_gmt":"2026-06-18T09:05:03","guid":{"rendered":"https:\/\/www.sage.com\/en-gb\/blog\/?p=30396"},"modified":"2026-06-18T11:28:54","modified_gmt":"2026-06-18T10:28:54","slug":"cyber-security-and-ai-sage-idc-research","status":"publish","type":"post","link":"https:\/\/www.sage.com\/en-gb\/blog\/cyber-security-and-ai-sage-idc-research\/","title":{"rendered":"The cyber maturity gap is no longer technical. It&#8217;s operational"},"content":{"rendered":"<header class=\"entry-header has-dark-background-color entry-header--standard entry-header--has-illustration entry-header--has-illustration--standard\">\n\t<div class=\"container\">\n\t\t<div class=\"entry-header__row row align-center\">\n\t\t\t<div class=\"col col-lg-7 col-xlg-6 entry-header__content\">\n\t\t\t\t\t\t\t<div class=\"component component-single-header\">\n\t\t\t\t\t\t\t\t\t\t<div class=\"entry-header__misc text--subtitle text--uppercase text--small\">\n\t\t\t\t\t\t\t<a href=\"https:\/\/www.sage.com\/en-gb\/blog\/category\/technology-innovation\/\" class=\"entry-header__link\">Technology &amp; Innovation<\/a>\t\t\t\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t<div class=\"entry-title-wrapper\">\n\t\t\t\t\t<h1 class=\"entry-title\">\n\t\t\t\t\t\tThe cyber maturity gap is no longer technical. It&#8217;s operational\t\t\t\t\t<\/h1>\n\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\t<p class=\"entry-header__description\">\n\t\t\t\t\t\tAI is making cyber threats faster, cheaper and harder to spot. For businesses, the danger isn&#8217;t indifference\u2014it&#8217;s the gap between intention and ability to respond.\t\t\t\t\t<\/p>\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t<\/div>\n\n\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t<\/div>\n\t\t<div class=\"single-post-details container\">\n\t\t<div class=\"col\">\n\t\t\t<span class=\"posted-on \">Published <time class=\"entry-date published\" datetime=\"2026-06-18T10:05:03+01:00\">18 June, 2026<\/time><\/span><span class=\"reading-time\"> min read<\/span>\n\t\t<button\n\t\t\ttype=\"button\"\n\t\t\tclass=\"social-share-button button button--icon button--secondary js-social-share-button\"\n\t\t\tdata-share-title=\"The cyber maturity gap is no longer technical. It&#8217;s operational\"\n\t\t\tdata-share-url=\"https:\/\/www.sage.com\/en-gb\/blog\/cyber-security-and-ai-sage-idc-research\/\"\n\t\t\tdata-share-text=\"Please read this interesting article\"\n\t\t>\n\t\t\t<span class=\"social-share-button__share-label\">Share<\/span>\n\t\t\t<span class=\"social-share-button__copy-label\" hidden>Copy Link<\/span>\n\t\t\t<span class=\"social-share-button__copy-tooltip\" aria-hidden=\"true\" hidden>Copied<\/span>\n\t\t<\/button>\n\n\t\t\t\t<\/div>\n\t<\/div>\n\t<\/header>\n\n\n\n<div class=\"wp-block-post-author has-dark-background-color alignfull\">\n\t<div class=\"container\">\n\t\t<div class=\"col\">\n\t\t\t\t\t\t\t<div class=\"co-authors\">\n\t\t\t\t\t\n\t\t<div class=\"entry-author-wrapper\">\n\t\t\t<a class=\"entry-author\" href=\"https:\/\/www.sage.com\/en-gb\/blog\/author\/kanecutler\/\">\n\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"40\" height=\"40\" src=\"https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2026\/06\/Media-350x350.jpg\" class=\"entry-author__image\" alt=\"Kane Cutler\" \/>\t\t\t\t<span class=\"entry-author__name\">Kane Cutler<\/span>\n\t\t\t<\/a>\n\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t<\/div>\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\">Artificial intelligence is rapidly changing the threat landscape. It is making attacks faster to develop, easier to scale and harder to distinguish from legitimate activity.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For small and medium-sized businesses, this matters because the pace of change is accelerating faster than many can strengthen the governance, visibility and operational discipline needed to keep up.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">That\u2019s what we explore in this article, as follows:<\/p>\n\n\n<?xml encoding=\"utf-8\" ?><div class=\"wp-block-yoast-seo-table-of-contents yoast-table-of-contents\"><ul><li><a href=\"#h-ai-means-increased-cyber-security-spending\" data-level=\"2\">AI means increased cyber security spending<\/a><\/li><li><a href=\"#h-how-the-maturity-gap-is-becoming-operational\" data-level=\"2\">How the maturity gap is becoming operational<\/a><\/li><li><a href=\"#h-why-risk-prioritisation-is-critical\" data-level=\"2\">Why risk prioritisation is critical<\/a><\/li><li><a href=\"#h-how-to-fix-cyber-security-for-businesses\" data-level=\"2\">How to fix cyber security for businesses<\/a><\/li><li><a href=\"#h-the-importance-of-being-ready-to-respond-to-cyber-threats\" data-level=\"2\">The importance of being ready to respond to cyber threats<\/a><\/li><li><a href=\"#h-why-ai-adoption-requires-better-governance\" data-level=\"2\">Why AI adoption requires better governance<\/a><\/li><li><a href=\"#h-why-vendors-must-carry-more-of-the-load\" data-level=\"2\">Why vendors must carry more of the load<\/a><\/li><li><a href=\"#h-final-thoughts\" data-level=\"2\">Final thoughts<\/a><\/li><li><a href=\"#h-frequently-asked-questions\" data-level=\"2\">Frequently asked questions<\/a><\/li><\/ul><\/div>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-ai-means-increased-cyber-security-spending\">AI means increased cyber security spending<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Recent IDC research commissioned by Sage, <a href=\"https:\/\/www.sage.com\/en-gb\/trust-security\/security\/\" target=\"_blank\" rel=\"noreferrer noopener\">SMBs in the age of AI: Navigating cyber complexity and building resilience<\/a>, shows that 60% of small and medium-sized businesses expect to increase cyber security spending.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The issue is not a lack of awareness or intent. It is the widening gap between good intent and the ability to manage a more complex threat environment consistently.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">AI does not need to create an entirely new category of attack to shift the balance.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Its immediate impact is to make familiar threats more efficient.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Vulnerability discovery and exploitation can happen at greater speed and scale. <a href=\"https:\/\/www.sage.com\/en-gb\/blog\/phishing-why-trusting-your-gut-matters\/\" target=\"_blank\" rel=\"noreferrer noopener\">Phishing can become more convincing.<\/a> Impersonation can become more realistic.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The same technology also offers defenders clear benefits.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">AI can support code review, vulnerability discovery, threat analysis and remediation.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The advantage will not come from access to AI alone. It will come from the ability to use it safely, apply human judgement and translate insight into action quickly.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-how-the-maturity-gap-is-becoming-operational\">How the maturity gap is becoming operational<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Many businesses already have essential controls in place, including email protection, patching, backups, endpoint security and multifactor authentication.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Those foundations remain critical.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The challenge is that cyber resilience increasingly depends on what happens beyond those foundations.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The research found that 44% of businesses surveyed cite a lack of internal expertise or time as a major challenge. That suggests the problem is no longer simply about having the right tools. It&#8217;s about having the capacity, visibility, and processes to use them effectively.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Effective security is ultimately an operational discipline and depends on clear ownership, current knowledge of systems and data, regular testing, informed prioritisation and the ability to respond when something changes.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-why-risk-prioritisation-is-critical\">Why risk prioritisation is critical<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">A growing volume of vulnerabilities does not mean every issue presents the same risk.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In practice, context matters. A weakness in an isolated, low-value system may create limited immediate exposure.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A lower-severity issue affecting an internet-facing service, critical workflow or sensitive dataset may require much faster action.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Several relatively minor weaknesses can also become more serious when combined.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Businesses need to understand which systems are exposed, which data matters most, how easily a weakness could be exploited and what the operational impact would be.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">AI can help surface and analyse that information more quickly. What it cannot do is determine which services matter most to the business or what level of disruption the organisation can tolerate or which risks leaders should accept. Those remain human decisions.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">As attackers and software providers operate at greater speed, businesses will also need to review their exposure more frequently.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This does not require every business to adopt continuous security testing overnight. It means shortening review cycles progressively, starting with the systems, suppliers and data that would create the greatest business impact if compromised.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-how-to-fix-cyber-security-for-businesses\">How to fix cyber security for businesses<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The answer is not for every business to recreate the security capability of a global enterprise. For most businesses that would be unrealistic and, in many cases, unnecessary.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Where internal capacity is limited, businesses can bring in specialist support through managed security providers, external advisers and trusted technology partners. In some cases, seeking external expertise is more effective than leaving known risks unaddressed because smaller, non-corporate businesses lack the time or resources to tackle them.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">That does not remove the need for oversight.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">When evaluating a provider, businesses should look beyond marketing claims and prioritise vendors that provide clear, auditable evidence of how they manage security, and review that trust regularly rather than treating it as a one-off check.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Capability can be outsourced. Accountability cannot.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-the-importance-of-being-ready-to-respond-to-cyber-threats\">The importance of being ready to respond to cyber threats<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Only 36% of businesses surveyed have an incident response plan supported by exercises. This matters because no organisation can eliminate cyber risk completely.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">But when an incident occurs, responsibility for decisions still sits with the business, even if they rely on external providers for support.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Leaders should know who is in charge, which services need to be restored first and how customers, regulators and partners will be informed.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A plan that has never been practised remains an assumption. Simple exercises can expose unclear ownership, missing information and unrealistic recovery expectations before a real breach does.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-why-ai-adoption-requires-better-governance\">Why AI adoption requires better governance<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">AI is lowering the barriers to building and modifying software. Employees can now generate code, automate workflows and connect systems with minimal technical expertise.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">As a result, businesses can introduce software risk without seeing themselves as software developers.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Before integrating an AI-enabled tool, leaders should understand what data it can access, what it retains, which systems it connects to, what permissions it requires and how its outputs will be used.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This is increasingly important in a market filled with ambitious claims and rapid product launches. Businesses need to separate useful innovation from marketing hype.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Human supervision remains necessary where AI influences sensitive data, customers, employees, financial decisions or other material business outcomes.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The aim is not to slow adoption but to ensure speed does not come at the expense of safety.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-why-vendors-must-carry-more-of-the-load\">Why vendors must carry more of the load<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Only 13% of businesses in the IDC research continuously monitor the security of their software-as-a-service providers but the reality is most businesses do not have the resources to conduct enterprise-grade assurance across every platform they use.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.sage.com\/en-gb\/trust-security\/ai-ethics\/building-responsible-ai\/\" target=\"_blank\" rel=\"noreferrer noopener\">Technology providers need to make secure adoption easier.<\/a> Customers should be able to understand, in plain English, how AI is being used, what data it can access and what controls are in place to protect it.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A poorly governed AI capability can expose customers to risk and erode trust. The strongest providers will not be those that release the most AI features, spend the most on security or adopt the latest tools first.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">They will be the ones who understand their risks, know where accountability sits and have the operational discipline to respond as technology evolves. They\u2019ll also ensure those capabilities are safe, understandable and easy to adopt.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">As AI continues to lower barriers and increase speed, access to technology is becoming less of a differentiator. What increasingly matters is how organisations govern, deploy and manage those capabilities in practice.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The cyber maturity gap is not simply a technology challenge. It is increasingly an operational one.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-final-thoughts\">Final thoughts<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The next phase of AI adoption will be defined by more than speed and innovation. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Trust and operational resilience will determine which organisations can turn new capability into sustainable value. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Explore <a href=\"https:\/\/www.sage.com\/en-gb\/trust-security\/security\/\">SMBs in the age of AI: Navigating cyber complexity and building resilience research<\/a> for yourself and see how you can improve security in a changing technology landscape.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-frequently-asked-questions\">Frequently asked questions<\/h2>\n\n\n\n<div class=\"schema-faq wp-block-yoast-faq-block\"><div class=\"schema-faq-section\" id=\"faq-question-1781692385680\"><strong class=\"schema-faq-question\"><strong>Is AI creating entirely new types of cyberattack for businesses?<\/strong><\/strong> <p class=\"schema-faq-answer\">AI\u2019s biggest immediate effect is making familiar threats more efficient. It lets attackers find and exploit weaknesses at greater speed and scale, and makes phishing and impersonation far more convincing. The same tools also help defenders with code review, threat analysis and remediation\u2014so the advantage goes to whoever can apply AI safely and turn its insight into action fastest.<\/p> <\/div> <div class=\"schema-faq-section\" id=\"faq-question-1781692399301\"><strong class=\"schema-faq-question\"><strong>Our business already has MFA, backups and endpoint protection\u2014isn&#8217;t that enough?<\/strong><\/strong> <p class=\"schema-faq-answer\">Those foundations remain essential, but the next maturity gap sits above them. Effective security now depends on clear ownership, current knowledge of your systems and data, regular testing and the ability to respond when something changes. IDC research commissioned by Sage reveals that 44% of SMBs cited a lack of internal expertise or time as a major challenge\u2014which points to a capability gap, not simply a technology one.<\/p> <\/div> <div class=\"schema-faq-section\" id=\"faq-question-1781692412116\"><strong class=\"schema-faq-question\"><strong>With so many vulnerabilities to deal with, how does a business know which to fix first?<\/strong><\/strong> <p class=\"schema-faq-answer\">Not every vulnerability carries the same risk. A weakness in an isolated, low-value system may matter far less than a lower-severity issue on an internet-facing service or one holding sensitive data. It&#8217;s also worth watching for combinations, as several minor weaknesses together can become serious. AI can speed up that analysis, but it can&#8217;t decide which business service matters most or how much disruption you can tolerate. People stay accountable for the call.<\/p> <\/div> <div class=\"schema-faq-section\" id=\"faq-question-1781692422787\"><strong class=\"schema-faq-question\"><strong>Can a business outsource its cyber security?<\/strong><\/strong> <p class=\"schema-faq-answer\">Yes. And where internal capacity is limited, it&#8217;s often the responsible choice. Monitoring, vulnerability management, technical assurance and incident support can all be delivered by managed providers and trusted partners, which beats leaving known risks unaddressed. What can&#8217;t be handed over is ownership: leaders still need to know which services are critical, which risks they&#8217;re accepting and how their providers are being assessed. Capability can be outsourced; accountability cannot.<\/p> <\/div> <div class=\"schema-faq-section\" id=\"faq-question-1781692435795\"><strong class=\"schema-faq-question\"><strong>What should a business check before switching on a new AI tool or feature?<\/strong><\/strong> <p class=\"schema-faq-answer\">Before integrating any AI-enabled tool, understand what data it can access, what it retains, which systems it connects to, what permissions it needs and how its outputs will be used. Keep human oversight wherever AI touches sensitive data, customers, employees or financial decisions. It&#8217;s also fair to expect more from vendors\u2014only 13% of SMBs continuously monitor their SaaS providers&#8217; security, so safer defaults and plain-English controls should come built in, not bolted on by the customer.<\/p> <\/div> <\/div>\n\n\n\n<div class=\"single-cta\">\n\t<div class=\"single-cta__positioner on-scroll-highlight__target\">\n\t\t<div class=\"single-cta__wrapper has-dark-background-color\">\n\t\t\t<div class=\"single-cta__content\">\n\t\t\t\t\t\t\t\t<h2 class=\"single-cta__title h3\">Explore Sage trust and security<\/h2>\n\n\t\t\t\t\t\t\t\t\t<div class=\"single-cta__description\">\n\t\t\t\t\t\t<p><!-- wp:paragraph --><\/p>\n<p>Trust is the foundation of good security and our customer relations. Learn how we safeguard your security, value your privacy, and uphold the highest standards of data ethics.<\/p>\n<p><!-- \/wp:paragraph --><\/p>\n\t\t\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a\n\t\t\t\t\t\thref=\"https:\/\/www.sage.com\/en-gb\/trust-security\/\"\n\t\t\t\t\t\tclass=\"single-cta__button button button--primary\"\n\t\t\t\t\t\t\t\t\t\t\t\t\tid=\"cta-id-24055\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tdata-button-location=\"cta_box\"\n\t\t\t\t\t\t\t\t\t\t\t>Learn more<\/a>\n\t\t\t\t\t\t\t<\/div>\n\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t<img decoding=\"async\" width=\"800\" height=\"450\" src=\"https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2025\/08\/tandshubcta.jpg\" class=\"single-cta__image\" alt=\"A man in an office exploring the Sage trust and security hub\" loading=\"lazy\" srcset=\"https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2025\/08\/tandshubcta.jpg 800w\" sizes=\"auto, (min-width: 48em) 33vw, 100vw\" \/>\t\t\t<\/div>\n<\/div>\n\n\n<section class=\"more-topics alignfull has-grey-light-background-color wp-block-sage-post-topics\">\n\t<div class=\"container\">\n\t\t<div class=\"row\">\n\t\t\t<div class=\"col col-12 col-lg-4\">\n\t\t\t\t<h3 class=\"more-topics__title h2\">Browse more topics from this article<\/h3>\n\t\t\t<\/div>\n\t\t\t<div class=\"col col-12 col-lg-8\">\n\t\t\t\t<ul class=\"post-tags__list\">\n\t\t\t\t\t\t\t\t\t\t\t<li class=\"post-tags__item\">\n\t\t\t\t\t\t\t<a href=\"https:\/\/www.sage.com\/en-gb\/blog\/tag\/ai\/\" class=\"post-tags__link button button--secondary\">\n\t\t\t\t\t\t\t\tAI\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t\t\t\t<li class=\"post-tags__item\">\n\t\t\t\t\t\t\t<a href=\"https:\/\/www.sage.com\/en-gb\/blog\/tag\/security-fraud\/\" class=\"post-tags__link button button--secondary\">\n\t\t\t\t\t\t\t\tSecurity and fraud\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t\t<\/ul>\n\t\t\t<\/div>\n\t\t<\/div>\n\t<\/div>\n<\/section>\n\n\n<div class=\"alignfull wp-block-sage-related-posts\">\n\t<section class=\"related-posts card-grid has-dark-background-color\">\n\t<div class=\"container\">\n\t\t\t\t\t<div class=\"row\">\n\t\t\t\t<div class=\"col\">\n\t\t\t\t\t<h2 class=\"related-posts__heading related-posts__heading--featured h1\">Explore more wisdom<\/h2>\n\t\t\t\t<\/div>\n\t\t\t<\/div>\n\n\t\t\t<div class=\"row related-posts__featured\">\n\t\t\t\t<div class=\"col card-grid__item\">\n\t\t\t\t\t<article\n\t\tclass=\"card-post related-post related-post-0 post-30540 post type-post status-publish format-standard has-post-thumbnail hentry category-strategy-legal-operations category-technology-innovation category-trends-insights tag-gdpr tag-security-fraud business_type-small-business business_type-medium-sized-business business_type-accountants industry-professional-services card-post--is-clickable\"\n>\n\t<div class=\"card-post__media-wrapper\">\n\t\t<figure class=\"card-post__media\">\n\t\t\t\t\t\t\t<img decoding=\"async\" width=\"1440\" height=\"810\" src=\"https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2026\/06\/AdobeStock_2064057245-1440x810.jpg\" class=\"card-post__image\" alt=\"A man entering data in an office environment\" loading=\"lazy\" srcset=\"https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2026\/06\/AdobeStock_2064057245-684x384.jpg 684w, https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2026\/06\/AdobeStock_2064057245-768x432.jpg 768w, https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2026\/06\/AdobeStock_2064057245-1440x810.jpg 1440w\" sizes=\"auto, (min-width: 48em) 250px, (min-width: 30em) 100vw, 100vw\" \/>\t\t\t\n\t\t\t\n\t\t\t\t\t<\/figure>\n\t<\/div>\n\n\t<div class=\"card-post__content\">\n\t\t\t\t\t<div class=\"card-post__label\">Recommended<\/div>\n\t\t\n\t\t\t\t\t<div class=\"card-post__meta\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"card-post__meta-text\"><span class=\"posted-on \"><time class=\"entry-date published\" datetime=\"2026-06-25T10:41:04+01:00\">25 June, 2026<\/time><\/span><\/span>\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"card-post__meta-text\"><span class=\"reading-time\">10 min read<\/span><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\n\t\t<p class=\"card-post__title h3\">\n\t\t\t\t\t\t\t<a\n\t\t\t\t\tclass=\"card-post__title-link\"\n\t\t\t\t\thref=\"https:\/\/www.sage.com\/en-gb\/blog\/data-use-and-access-act-2025-need-to-know\/\"\n\t\t\t\t>\n\t\t\t\n\t\t\tUK data protection changes in 2026: What businesses must do now\n\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t<\/p>\n\n\t\t\n\t\t\t\t\t<p class=\"card-post__description\">\n\t\t\t\tThanks to the DUAA, the UK&#8217;s data protection rules have undergone a post-Brexit and post-GDPR refresh, with big changes as of June 2026. Here&#8217;s your crash course.\t\t\t<\/p>\n\t\t\n\t\t\t<\/div>\n\n\t<\/article>\n\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t\n\t\t\t\t\t<div class=\"row related-posts__non-featured\">\n\t\t\t\t<div class=\"col col-12\">\n\t\t\t\t\t<h2 class=\"related-posts__heading related-posts__heading--more h4\">More on this Topic<\/h2>\n\t\t\t\t<\/div>\n\n\t\t\t\t\n\t\t\t\t\t<div class=\"col col-6 col-lg-3 card-grid__item\">\n\t\t\t\t\t\t<article\n\t\tclass=\"card-post related-post related-post-1 post-30434 post type-post status-publish format-standard has-post-thumbnail hentry category-people-leadership category-trends-insights tag-ai tag-recruit tag-hr-processes-medium-businesses tag-hr-process tag-hr-payroll-benefits tag-looking-after-your-employees business_type-small-business business_type-medium-sized-business\"\n>\n\t\t\t<a\n\t\t\tclass=\"card-post__link\"\n\t\t\thref=\"https:\/\/www.sage.com\/en-gb\/blog\/what-is-ai-in-hr\/\"\n\t\t\t\t\t>\n\t\t\t<figure class=\"card-post__media\">\n\t\t\t\t\t\t\t<img decoding=\"async\" width=\"684\" height=\"384\" src=\"https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2026\/06\/Ai-in-HR-infographic-image-684x384.jpg\" class=\"card-post__image\" alt=\"A woman poses in front of the Sage glow line and a black background.\" loading=\"lazy\" srcset=\"https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2026\/06\/Ai-in-HR-infographic-image-684x384.jpg 684w, https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2026\/06\/Ai-in-HR-infographic-image-768x432.jpg 768w, https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2026\/06\/Ai-in-HR-infographic-image-1440x810.jpg 1440w\" sizes=\"auto, (min-width: 48em) 250px, (min-width: 30em) 100vw, 100vw\" \/>\t\t\t\n\t\t\t\n\t\t\t\t\t<\/figure>\n\n\t\t\n\t\t\t\t\t<div class=\"card-post__meta\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"card-post__meta-text\"><span class=\"posted-on \"><time class=\"entry-date published\" datetime=\"2026-06-23T09:02:11+01:00\">23 June, 2026<\/time><\/span><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"card-post__meta-text\"><span class=\"reading-time\">10 min read<\/span><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\n\t\t<p class=\"card-post__title h5\">\n\t\t\tWhat is AI in HR and how can you use it responsibly?\t\t<\/p>\n\n\t\t\t<\/a>\n\t\n\t\n\t\t\n\t\n\t<\/article>\n\t\t\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\t<div class=\"col col-6 col-lg-3 card-grid__item\">\n\t\t\t\t\t\t<article\n\t\tclass=\"card-post related-post related-post-2 post-29356 post type-post status-publish format-standard has-post-thumbnail hentry category-technology-innovation category-trends-insights tag-ai tag-security-fraud business_type-small-business business_type-medium-sized-business business_type-accountants\"\n>\n\t\t\t<a\n\t\t\tclass=\"card-post__link\"\n\t\t\thref=\"https:\/\/www.sage.com\/en-gb\/blog\/ai-cyber-security\/\"\n\t\t\t\t\t>\n\t\t\t<figure class=\"card-post__media\">\n\t\t\t\t\t\t\t<img decoding=\"async\" width=\"684\" height=\"384\" src=\"https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2022\/04\/GettyImages-1325899588-684x384.jpg\" class=\"card-post__image\" alt=\"\" loading=\"lazy\" srcset=\"https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2022\/04\/GettyImages-1325899588-684x384.jpg 684w, https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2022\/04\/GettyImages-1325899588-768x432.jpg 768w, https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2022\/04\/GettyImages-1325899588-1440x810.jpg 1440w\" sizes=\"auto, (min-width: 48em) 250px, (min-width: 30em) 100vw, 100vw\" \/>\t\t\t\n\t\t\t\n\t\t\t\t\t<\/figure>\n\n\t\t\n\t\t\t\t\t<div class=\"card-post__meta\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"card-post__meta-text\"><span class=\"posted-on \"><time class=\"entry-date published\" datetime=\"2026-03-31T12:09:13+01:00\">31 March, 2026<\/time><\/span><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"card-post__meta-text\"><span class=\"reading-time\">1 min read<\/span><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\n\t\t<p class=\"card-post__title h5\">\n\t\t\tAI is accelerating familiar attacks: What\u2019s changing, and how leaders should respond\t\t<\/p>\n\n\t\t\t<\/a>\n\t\n\t\n\t\t\n\t\n\t<\/article>\n\t\t\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\t<div class=\"col col-6 col-lg-3 card-grid__item\">\n\t\t\t\t\t\t<article\n\t\tclass=\"card-post related-post related-post-3 post-28978 post type-post status-publish format-standard has-post-thumbnail hentry category-technology-innovation category-trends-insights tag-ai tag-data-analytics tag-digital-transformation tag-finance-futurists tag-state-of-small-business tag-workplace-technology business_type-small-business\"\n>\n\t\t\t<a\n\t\t\tclass=\"card-post__link\"\n\t\t\thref=\"https:\/\/www.sage.com\/en-gb\/blog\/make-ai-useful-small-business\/\"\n\t\t\t\t\t>\n\t\t\t<figure class=\"card-post__media\">\n\t\t\t\t\t\t\t<img decoding=\"async\" width=\"684\" height=\"384\" src=\"https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2022\/04\/GettyImages-1261586981-684x384.jpg\" class=\"card-post__image\" alt=\"\" loading=\"lazy\" srcset=\"https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2022\/04\/GettyImages-1261586981-684x384.jpg 684w, https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2022\/04\/GettyImages-1261586981-768x432.jpg 768w, https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2022\/04\/GettyImages-1261586981-1440x810.jpg 1440w\" sizes=\"auto, (min-width: 48em) 250px, (min-width: 30em) 100vw, 100vw\" \/>\t\t\t\n\t\t\t\n\t\t\t\t\t<\/figure>\n\n\t\t\n\t\t\t\t\t<div class=\"card-post__meta\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"card-post__meta-text\"><span class=\"posted-on \"><time class=\"entry-date published\" datetime=\"2026-03-05T14:56:33+00:00\">5 March, 2026<\/time><\/span><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"card-post__meta-text\"><span class=\"reading-time\">3 min read<\/span><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\n\t\t<p class=\"card-post__title h5\">\n\t\t\tMake AI useful. Fix one workflow in 30 days\t\t<\/p>\n\n\t\t\t<\/a>\n\t\n\t\n\t\t\n\t\n\t<\/article>\n\t\t\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\t<div class=\"col col-6 col-lg-3 card-grid__item\">\n\t\t\t\t\t\t<article\n\t\tclass=\"card-post related-post related-post-4 post-28851 post type-post status-publish format-standard has-post-thumbnail hentry category-growth-customers category-technology-innovation tag-ai tag-business-performance tag-create-business-plan tag-grow-business tag-midsized-business tag-productivity business_type-small-business business_type-medium-sized-business\"\n>\n\t\t\t<a\n\t\t\tclass=\"card-post__link\"\n\t\t\thref=\"https:\/\/www.sage.com\/en-gb\/blog\/how-to-try-ai\/\"\n\t\t\t\t\t>\n\t\t\t<figure class=\"card-post__media\">\n\t\t\t\t\t\t\t<img decoding=\"async\" width=\"684\" height=\"384\" src=\"https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2024\/10\/Woman-calculating-capital-employed-684x384.jpg\" class=\"card-post__image\" alt=\"Working on employee tasks\" loading=\"lazy\" srcset=\"https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2024\/10\/Woman-calculating-capital-employed-684x384.jpg 684w, https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2024\/10\/Woman-calculating-capital-employed-768x512.jpg 768w, https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2024\/10\/Woman-calculating-capital-employed-1214x810.jpg 1214w\" sizes=\"auto, (min-width: 48em) 250px, (min-width: 30em) 100vw, 100vw\" \/>\t\t\t\n\t\t\t\n\t\t\t\t\t<\/figure>\n\n\t\t\n\t\t\t\t\t<div class=\"card-post__meta\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"card-post__meta-text\"><span class=\"posted-on \"><time class=\"entry-date published\" datetime=\"2026-02-27T12:07:50+00:00\">27 February, 2026<\/time><\/span><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"card-post__meta-text\"><span class=\"reading-time\">8 min read<\/span><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\n\t\t<p class=\"card-post__title h5\">\n\t\t\tHow to try AI without breaking your business: A practical 5-step roadmap\t\t<\/p>\n\n\t\t\t<\/a>\n\t\n\t\n\t\t\n\t\n\t<\/article>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t\t<\/div>\n<\/section>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>AI is making cyber threats faster, cheaper and harder to spot. For businesses, the danger isn&#8217;t indifference\u2014it&#8217;s the gap between intention and ability to respond.<\/p>\n","protected":false},"author":280,"featured_media":16422,"menu_order":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_sage_video":false,"post_featured_image_hide":false,"sage_hide_published_date":false,"sage_hide_read_time":false,"sage_hide_share_buttons":false,"_pwl_sage_podcast_buzzsprout_src":"","footnotes":""},"categories":[11],"tags":[50,52],"business_type":[4,3],"lilypad":[],"context":[],"industry":[54,55,56,57,58,59,60,341,669,61,62,63,65,66],"persona":[67,68,69,70,71,72,73,74,75],"imagine_tag":[331,330,329,309,328,267,300],"coauthors":[759],"class_list":["post-30396","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-technology-innovation","tag-ai","tag-security-fraud","business_type-small-business","business_type-medium-sized-business","industry-chemical","industry-construction","industry-distribution","industry-ecommerce","industry-entertainment","industry-financial-services","industry-food-beverage","industry-healthcare","industry-hr-and-people-management","industry-manufacturing","industry-non-profit","industry-professional-services","industry-saas","industry-travel-hospitality"],"sage_meta":{"region":"en-gb","author_name":"Keir Thomas-Bryant","featured_image":"https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2023\/09\/GettyImages-842849562.jpg","imagine_tags":{"331":"AI accountants","330":"AI FP","329":"AI HRP","309":"AI Hub","328":"AI small","267":"Security Fraud","300":"Security Tech Leaders"}},"distributor_meta":false,"distributor_terms":false,"distributor_media":false,"distributor_original_site_name":"Sage Advice UK","distributor_original_site_url":"https:\/\/www.sage.com\/en-gb\/blog","push-errors":false,"_links":{"self":[{"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/posts\/30396","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/users\/280"}],"replies":[{"embeddable":true,"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/comments?post=30396"}],"version-history":[{"count":4,"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/posts\/30396\/revisions"}],"predecessor-version":[{"id":30455,"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/posts\/30396\/revisions\/30455"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/media\/16422"}],"wp:attachment":[{"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/media?parent=30396"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/categories?post=30396"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/tags?post=30396"},{"taxonomy":"business_type","embeddable":true,"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/business_type?post=30396"},{"taxonomy":"lilypad","embeddable":true,"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/lilypad?post=30396"},{"taxonomy":"context","embeddable":true,"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/context?post=30396"},{"taxonomy":"industry","embeddable":true,"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/industry?post=30396"},{"taxonomy":"persona","embeddable":true,"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/persona?post=30396"},{"taxonomy":"imagine_tag","embeddable":true,"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/imagine_tag?post=30396"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/coauthors?post=30396"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}