Executive Summary
IDC research says over 80% of SMBs are unprepared for AI-related threats and nearly a quarter have no dedicated protections for AI applications.
What Happened
IDC research cited in this article reports that over 80% of SMBs are unprepared or in the very early stages of readiness for AI-related cyber threats, despite rapidly adopting AI, SaaS, and third‑party services.[1] Nearly a quarter of surveyed SMBs have not implemented any dedicated protections for AI applications, leaving them exposed to risks such as data leakage, insecure integrations, and AI-driven attack automation.[1]
Vulnerability / Attack Technique
SMB AI readiness gap (survey)
Technical Mechanism
Survey findings.
AI Security Category
LLM02:2025 Sensitive Information Disclosure
Relevant Frameworks
RealGround Analysis
Most SMBs have no AI-specific controls. RealGround analysis: start with an inventory of AI apps and integrations.
Recommended Controls
- Inventory AI applications
- Add basic protections for AI integrations
Related RealGround Service
AI Security Readiness Assessment · or start with the free AI Agent Security Scanner.
Sources
ERP News: https://erpnews.com/cyber-security-moves-up-the-smb-agenda-as-ai-adoption-exposes-operational-gaps/
Summary and analysis written by RealGround from the source above; last updated 2026-10-18.