More than half of respondents, 54%, said they measure AI-driven impersonation in some way, but 46% do not measure it at all. The share that both measure and regularly report these attacks was lower in fully remote organisations at 28%, compared with 40% in hybrid organisations and 39% in office-based organisations.