Every digital service, AI included, depends on secure systems and data. AI can help defenders, and it also introduces new risks.
KEY QUESTION
Can an organisation detect a threat and recover if its systems fail?
Priorities are editorial judgements by Cyprus AI Monitor about public value and the attention each sector needs. They are not official strategy rankings, readiness scores or EU AI Act risk categories.
AI could help security teams rank unusual activity by priority, so that they respond faster and more accurately instead of facing more alerts.
These are examples of possible uses. They do not describe systems already in use or promise any benefit.
Protect monitoring data and AI inputs, test recovery from backups and verify alerts before consequential automated action.
Published figures for Cyprus. These supplementary measures are not part of the index score.
56.0%
Observation period:
Systems for detecting suspicious activity on business IT.
Covers businesses with 10+ people employed in the 2024 ICT survey. Businesses report only whether the practice is in place. How well it works, whether it involves AI and how far it protects against attacks are not measured.
90.0%
Observation period:
Backups to a separate location, including cloud backups.
Covers businesses with 10+ people employed in the 2024 ICT survey. Businesses report only whether the practice is in place. How well it works, whether it involves AI and how far it protects against attacks are not measured.
What we still need to know
Having monitoring or backups does not show whether attacks are detected or recovery works. These figures do not count AI security tools.
Proposed measures for future data collection. No values have been published for them.
Related source
The Commission’s 2026 Cyprus report calls for stronger protection of critical infrastructure. The business figures below describe reported practices.
Source or service page · checked 12 Sept 2026