Artificial intelligence is rapidly integrating into Pakistan’s professional landscape, but this swift adoption is shadowed by a significant risk. A recent study by Kaspersky reveals that while 86% of professionals in the country are using AI tools in their daily tasks, only 52% of them have received any training on how to use these tools safely and responsibly.
This report, “Cybersecurity in the workplace: Employee knowledge and attitude,” highlights a dangerous gap. This lack of training leaves both employees and their organizations highly vulnerable to data leaks and sophisticated cyber threats.
The study found that awareness of generative AI is incredibly high among Pakistani employees (98%), and its application is widespread. It is being used by 68% for writing or editing, 56.5% for creating images or videos, 52% for composing emails, and 35% for data analysis.
The problem lies in the training deficit. A concerning 21% of professionals admitted to receiving no AI-related training at all. Even among those who were trained, the focus was incomplete: 66% were taught only how to use AI effectively (like prompt writing), while a mere 52% were given guidance on the crucial cybersecurity aspects.
The report also sheds light on the growing issue of “Shadow IT,” where employees use AI applications without official company approval or oversight. Although 81% of participants stated their organization permits the use of generative AI, the lack of clear security protocols is evident.
“When implementing AI in a company, neither a total ban nor unrestricted access is an effective strategy,” said Rashid Al Momani, General Manager of Middle East at Kaspersky. He emphasized the need for a balanced approach, suggesting tiered access levels based on data sensitivity, combined with thorough training.
Kaspersky advises organizations to urgently implement responsible AI usage training for their staff and to ensure all work and personal devices are protected with up-to-date cybersecurity solutions to defend against phishing, fake AI tools, and other cyberattacks.

