Most companies aren't training staff on AI. That's a problem.

You've invested in AI licences. Your team has access to ChatGPT, Copilot, or Gemini. But are they actually using them effectively, or at all?

If you're not sure, you're not alone. CompTIA's recent research found that only 34% of companies require AI skills training for their employees. That means two-thirds of businesses are rolling out powerful AI tools and hoping for the best. Hope isn't a strategy. And it's certainly not delivering ROI.

The AI Proficiency Gap

There's a growing gap between AI adoption and AI proficiency. Businesses are rapidly purchasing AI tools, but workforce skills aren't keeping pace. The result is expensive licences that sit underused, inconsistent outputs across teams, and productivity gains that remain frustratingly out of reach.

As Katie Hoenicke, CompTIA's Chief Product Officer, put it: "Simply providing employees with access to AI tools does not guarantee success. The emphasis needs to be on fluency and the acquisition of skills."

This isn't just about knowing how to open ChatGPT. It's about understanding how to write effective prompts, verify outputs, avoid feeding sensitive data into public AI systems, and integrate these tools into daily workflows.

A Practical Training Solution

CompTIA has just launched an updated version of their AI Essentials training to address exactly this problem. The programme is designed specifically for non-technical, knowledge-based workers. The people who sit at desks and could benefit from AI but haven't had formal training on how to use it properly.

What makes it practical is the design:

• Under three hours: Busy employees can actually complete it
• Scenario-based: Learners work through realistic workplace challenges instead of abstract concepts
• Platform coverage: Covers ChatGPT, Microsoft Copilot, and Google Gemini
• 15-minute competency assessment: Audit where your team's skills actually stand
• Test-out option: Don't waste training time on people who are already proficient

The curriculum covers what you'd expect: what generative AI actually is, how to create effective prompts, how to spot and avoid AI hallucinations, handling sensitive information responsibly, and identifying practical use cases for specific roles.

Security and Governance Implications

For security-conscious organisations, this matters beyond just productivity. AI tools introduce new vectors for data leakage, policy violations, and security incidents. An employee who doesn't understand the risks might:

• Paste confidential client data into a public AI chatbot
• Accept AI-generated content without verifying accuracy
• Inadvertently share proprietary business information
• Bypass established security protocols while "experimenting"

Training isn't just about getting more out of your tools. It's about governance. When your team understands both the capabilities and the risks, you get the benefits of AI adoption without the compliance headaches. This is an increasingly important consideration for businesses with formal information security programmes.

Practical Steps for SMBs

If you're running a small or mid-sized business, here's the practical takeaway:

1. Audit your current state: Do you know which AI tools your employees are using? Do you have policies in place?
2. Invest in foundational training: Whether it's CompTIA AI Essentials or another structured programme, don't assume your team will figure it out themselves. Some will, but many won't.
3. Layer in governance: Training plus clear policies equals safer AI adoption. Your cybersecurity strategy should encompass AI tool usage.
4. Make AI fluency part of onboarding: It's quickly becoming as essential as basic IT literacy.

The Bottom Line

The organisations seeing real ROI from their AI investments aren't just buying licences. They're building fluency. CompTIA's AI Essentials programme represents a practical, accessible option for upskilling knowledge workers. But whatever approach you take, the message is clear: training isn't optional anymore. Strategic IT consulting can help you develop an AI adoption roadmap that balances innovation with risk management.

If you're unsure where to start or need help building AI governance into your broader IT strategy, get in touch. We help businesses adopt new technologies securely, without the guesswork.

Blue Icon is a London-based MSP specialising in cybersecurity and IT support for SMBs, startups, and professional services firms. We help our clients navigate technology change securely and confidently.