CybSafe CEO Warns £60m AI Budget Splurge Won't Solve UK Cybersecurity Leadership Crisis

The UK government has reaffirmed its commitment to boosting AI and cybersecurity funding in the latest Budget, including the introduction of a £60 million "National Cyber Shield." For fintech leaders, this highlights a critical shift toward AI-driven defense, though experts warn that capital alone cannot solve the persistent issue of human-centric cyber risk across the workforce.

What was announced

The UK Chancellor’s Budget speech outlined a significant allocation of funding aimed at bolstering the nation’s artificial intelligence capabilities, with a substantial portion dedicated to cybersecurity. Central to this strategy is the "National Cyber Shield," an initiative involving £60 million worth of AI agents designed to combat increasingly sophisticated digital threats. This move follows reports indicating that cybersecurity is often sidelined in daily operational decision-making within public services, such as police and fire departments.

The announcement comes amid data from the "Oh, Behave!" research conducted by CybSafe and the National Cybersecurity Alliance. The study found that 43% of surveyed workers reported their employers had either failed to communicate or had unclearly communicated policies regarding what information can be shared with AI tools. This gap in internal governance suggests that while the government is investing in technical infrastructure like Large Language Models (LLMs) and AI agents, the practical application of these tools remains a point of friction for employees.

The funding is intended to help organisations transition to working with AI "colleagues" safely, emphasizing that the responsibility for secure integration is shared between the state and private employers. The initiative aims to make working with AI agents and LLMs more straightforward and practical for the general workforce, while encouraging organisations to monitor whether these new tools are leading to positive behavioral changes.

"The National Cyber Shield, trailed on Saturday, is a welcome innovation: sixty million pounds’ worth of AI agents to help fight ever more complex threats - but without a serious improvement in leadership, this funding won’t touch the sides. With more and more AI ‘colleagues’, workers need to know how to work with them safely, a responsibility shared by both government and employers. From agents to LLMs, working safely with AI must be straightforward and practical. Crucially, organisations must also monitor whether these behaviours are leading to positive changes."

Oz Alashe MBE

The companies involved

CybSafe is a cybersecurity software company focused on the "human element" of digital risk. Headquartered in the UK, the firm provides a platform designed to measure and influence security behaviors rather than just providing static training. The company was founded by Oz Alashe MBE, who serves as the CEO and Founder. CybSafe operates in a market increasingly crowded by traditional security awareness training providers, but it distinguishes itself by utilizing data science and behavioral analytics to track how employees interact with technology and where vulnerabilities lie.

The firm’s approach centers on the idea that technical defenses are insufficient if the workforce does not understand how to navigate new technologies like generative AI safely. By providing metrics on behavioral change, CybSafe aims to give CISOs and business leaders a clearer picture of their human risk profile. The company has positioned itself as a key voice in the intersection of behavioral science and cybersecurity, frequently collaborating with international bodies like the National Cybersecurity Alliance to produce research on global security habits and the impact of emerging tech on corporate safety.

What FF News has reported before

FF News has previously tracked CybSafe’s expansion into the small and medium enterprise (SME) sector through strategic partnerships. In October 2024, we reported that Vodafone Business Launches Cybersecurity Platform to Help SM&Es Reduce Human Cyber Risk and Effectively Mitigate Cyberattacks. This initiative integrated CybSafe’s behavioral tools into a broader security offering for smaller firms, which often lack the dedicated security budgets of larger financial institutions. This prior coverage underscores the company's focus on addressing the "human risk" factor across the entire business ecosystem, from global corporations to local service providers.

What this means

The UK government’s £60 million injection into AI-driven defense signals that the "arms race" between attackers and defenders has officially moved into the realm of automated agents. However, this announcement puts immense pressure on C-suite executives to bridge the gap between high-level funding and ground-level execution. If nearly half of the workforce is already confused about AI data policies, the introduction of more complex "AI colleagues" could inadvertently expand the attack surface. The industry is now facing a reckoning: technical investment is no longer a substitute for cultural change. The success of the National Cyber Shield will likely depend on whether the private sector can match government spending with rigorous internal governance.