Small firms lag on AI security training, survey finds

KAREN JOY BACUDO

Finance Editor

Only 10% of small businesses provide staff with AI security training, according to MoneySuperMarket. Its survey also found that 44% of small business owners worry that using AI without proper safeguards could expose them to cyber threats.

The findings highlight a gap between interest in artificial intelligence and preparedness for the risks that come with it. The comparison site surveyed 250 UK sole traders and business owners with between one and 49 employees.

Use of AI in day-to-day business tasks remains limited among smaller companies. Just 15% of respondents said they use AI to support administrative processes, while 19% have used it to help with marketing strategy.

At the same time, more said they would like to use the technology for routine work. Some 36% want to use AI tools to automate or outsource administrative work, reporting and research, although 44% said they did not intend to use AI for those purposes.

The results suggest many smaller firms are still weighing potential efficiencies against concerns over security and readiness. One in five respondents said they would feel underprepared if their business were targeted by a cyber-attack.

Regional split

Attitudes varied sharply across the UK. Scotland showed the strongest interest in AI among the regions surveyed, with half of small business owners saying they wanted to use it to automate or outsource admin, reporting and research.

The South East followed at 48%, ahead of the South West at 43%. At the other end of the scale, Wales and Yorkshire and The Humber were the least likely to say they wanted to use AI in this way, both at 20%.

Concern over cyber risk also differed by region, although Scotland stood out for combining enthusiasm with caution. In Wales, 60% of business owners said they worried that without the right training, AI could expose their business to cyber threats. The same proportion in Scotland shared that concern.

The mix of interest and apprehension reflects a broader pattern in the survey. Businesses appear willing to consider AI for practical office tasks, but many have yet to put formal safeguards or staff training in place.

Training gap

The low level of investment in AI security training is likely to attract attention as small firms adopt widely available generative AI tools for writing, research and workflow support. These tools can speed up routine tasks and cut costs, but they can also create risks around data handling, staff misuse, and exposure to phishing and other cyber threats.

For smaller employers, the challenge is often as much about resources as awareness. Many have limited in-house IT support and may rely on informal policies when introducing new software, leaving staff without clear guidance on what information should or should not be entered into AI systems.

MoneySuperMarket based its national estimates on a UK small business population of 5.64 million. On that basis, the figures suggest more than 2.48 million small business owners are worried about cyber risks linked to unsafe AI use, while only a small minority have paid for employee training in this area.

The findings come as businesses across the economy test how AI can be used in routine operations. Among SMEs, the early focus appears to be on back-office work and marketing rather than more specialised applications, which may help explain why administration and marketing were the most commonly cited uses in the survey.

Alicia Hempsted, Business Insurance Expert at MoneySuperMarket, said: “AI can be a powerful tool for simplifying admin processes, improving marketing and saving time. The key for business owners that want to utilise it but have yet to start is making sure employees and business owners feel confident and informed about how they use it safely and effectively.”