arXiv · 2604.23058
The Security Cost of Intelligence: AI Capability, Cyber Risk, and Deployment Paradox
Abstract
Firms are deploying more capable AI systems, but organizational controls often have not kept pace. These systems can generate greater productivity gains, but high-value uses require broader authority exposure -- data access, workflow integration, and delegated authority -- when governance controls have not yet decoupled capability from authority exposure. We develop an analytical model in which a firm jointly chooses AI deployment and cybersecurity investment under this governance-capability gap. The central result shows a deployment paradox: in high-loss environments, better AI can lead a firm to deploy less when capability is deployed through broader authority exposure under weak governance. Optimal deployment also falls below the no-risk benchmark, and this shortfall widens with breach-loss magnitude and with the authority exposure attached to more capable systems. Governance investment that reduces breach-loss magnitude shrinks the paradox region itself, while breach externalities expand the range of environments in which deployment is socially constrained. Governance maturity is therefore not merely a constraint on AI adoption. It is a condition that shapes whether capability improvements translate into productive deployment.
Explore related subjects
Keep this discovery
Explore connections, maps & timelines
Sukwoong Choi. 2026-04-24. The Security Cost of Intelligence: AI Capability, Cyber Risk, and Deployment Paradox. https://arxiv.org/abs/2604.23058
Cite the original work for its findings. Save a collection to share your selection of sources.