Employees are adopting AI faster than organizations can guide safe use.

AI is no longer a separate tool that sits on the edge of the enterprise. It’s showing up inside productivity suites, collaboration platforms, developer tools and line-of-business apps.

But while adoption is accelerating, security models and training approaches are struggling to keep up. Employees are experimenting with public AI tools to analyze and share business information, often beyond the reach of corporate oversight and approved controls.

Lenovo’s latest Work Reborn report, Leading Your Workforce to AI Triumph, explores this widening gap between AI adoption, employee guidance and enterprise control. The message is clear: if you rely on traditional, periodic awareness training and policies, your organization is already behind the curve.

AI has Changed the Scale and Speed of Risk

Employees now make AI-assisted decisions throughout the day, moving between multiple tools and workflows. Every time someone uploads a document to summarize, pastes source code for debugging or asks an AI assistant to “rewrite this proposal for a customer,” a potential security risk is introduced.

Crucially, this is happening at machine speed. Prompts are fired off in seconds. Responses are acted on just as quickly. Sensitive information can be exposed, exfiltrated or misused long before a quarterly training module or an annual policy review has any chance to intervene. At scale, these micro decisions create a cumulative security risk that organizations cannot effectively monitor, govern or control through traditional training alone.

The Lenovo research underscores how unprepared many organizations still are. With 31% of employees receiving no AI training, and 51% saying training is not regular or ongoing, the classic approach of generic, infrequent security awareness campaigns is already obsolete in the age of embedded AI.

Awareness Isn’t the Problem—Action is

It’s easy to assume that unsafe AI use is driven by ignorance or complacency. Lenovo’s findings tell a more nuanced story. Employees are not blind to AI-related risk. In fact, 43% of employees are highly concerned about AI-driven attacks and accidental data exposure through public AI tools.

This is a critical insight for security leaders. The barrier to safe AI adoption is not awareness, it’s the lack of clear, actionable guidance at the moment of use. Employees may understand that uploading customer data into a public chatbot is risky in theory, but when they are under pressure to deliver a proposal, fix a problem or meet a deadline, that abstract concern is easily overridden.

What’s missing is not knowledge but support. Employees need real-time guidance embedded into the flow of work, reinforcing good habits, flagging dangerous behaviors, and giving them confidence that they can use AI productively without putting the organization at risk.

Security Guidance Must Move into the Moment of Action

To close the gap between AI usage and AI-safe behavior, Lenovo’s research points to a fundamental shift: security guidance has to move from the classroom and the Learning Management System (LMS) into the tools and workflows where people actually use AI.

In practical terms, that means:

• Prompt-level support and warnings. When an employee is about to paste sensitive data into an AI tool, they should see an immediate, context-aware warning, not a reminder they half remember from a slide deck months ago.
• Approved AI assistants embedded into workplace tools. Rather than fighting shadow AI, organizations can direct employees towards sanctioned assistants built into existing productivity platforms, with data access, logging and controls aligned to enterprise policies.
• In-context nudges and reminders. Subtle prompts inside everyday applications can reinforce what good AI behavior looks like: what can and can’t be shared, when to escalate, and how to verify AI outputs before acting on them.

This in-the-flow model turns security from an occasional interruption into a continuous companion. It also bridges the gap between policy and practice, translating high-level rules into real-time, role-specific guidance that employees can actually use.

Three Priorities for Security Leaders in the AI Era

Lenovo’s Work Reborn research identifies three core priorities for organizations that want to enable safe, scalable AI adoption:

1. Enable secure in-work behavior
   Security has to impact the way employees actually work, which isn’t always the way security teams would like them to work. That means embedding real-time, continuous guidance into everyday workflows so that employees are supported as they interact with AI.
2. Gain visibility across AI
   You cannot protect what you cannot see. AI introduces new visibility gaps across tools, workflows, and data flows, making it harder for security teams to maintain a complete picture of the risk. As AI tools proliferate, organizations need a unified view of where and how AI is being used, across both sanctioned and unsanctioned applications. This is especially critical as shadow AI usage expands beyond traditional security perimeters.
3. Use AI to protect against AI
   Finally, security teams must match AI-driven threats with AI-powered defenses. Lenovo highlights the importance of harnessing AI to detect and counter AI-driven risks in real time.

From AI Risk to AI-ready Operating model

Underpinning all of this is a broader transformation. Security leaders need operating models that assume both that AI is woven into everyday work, and that safe adoption is a shared responsibility across IT, security, HR and business leadership. As Lenovo’s research shows, organizations will be more secure—and more successful—when employees trust and consistently use approved tools and workflows.

For CISOs and security teams, that means shifting the narrative. AI in the enterprise cannot be framed solely as a new source of risk to be constrained. It must also be treated as a strategic capability to be enabled confidently, transparently and at scale.

Those who get this right will not just reduce exposure, they will unlock the full potential of AI-augmented work. That means faster threat response, more resilient operations and a workforce that can use AI confidently and securely at scale.

How Lenovo Can Help

Lenovo is already helping its customers ensure secure and compliant AI adoption by providing visibility into AI usage, preventing data leakage and misuse, and enforcing policy-driven guardrails across the enterprise. Some of the key features of Lenovo’s services are:

• Eliminating blind spots and gain visibility of AI risk surface.
• Driving safe AI usage through approved AI tools while preventing unsanctioned apps.
• Preventing data breaches by blocking confidential data exposure to third-party AI models.
• Supporting regulatory investigations with complete AI audit trails.
• Providing frictionless AI experiences to enterprise users through invisible privacy enforcement.

See The Full Playbook

Security leaders need operating models that support secure AI use across everyday work. Lenovo’s Work Reborn research shows that as AI becomes embedded into workflows, security must also be embedded into how work actually happens.

To explore how enterprise leaders are preparing employees for secure, scalable AI adoption, read the full Work Reborn report, Leading Your Workforce to AI Triumph.