Only 25% of UK IT decision makers report having strong governance frameworks for agentic AI.

13% of enterprises feel highly prepared for upcoming AI-related regulations.

88% of organizations are actively implementing or have established clearly defined guardrails or governance policies for AI security tools.

68% of enterprises report high confidence in their visibility into AI agents.

24% of enterprises rely on human-in-the-loop models for most AI agent tasks.

56% of organizations require proven accuracy and lower false positive rates before deploying AI systems.

51% of organizations say human oversight is needed in AI governance due to the speed at which attackers can adapt.

45% of organizations emphasize the need for traceability and auditability of AI-driven actions.

85% of enterprises believe they have the in-house expertise to manage autonomous AI networks.

51% of organizations expect transparency in how AI models make decisions.

Nearly two thirds of CISOs report low confidence in their ability to prevent unsafe AI data access.

No single function owns more than 25% of AI governance responsibility.

69% of security, IT, and compliance professionals state that adoption of AI tools in their organization is outpacing existing security and compliance controls.

51% of organizations in Canada identify AI model monitoring, auditing and assurance tools as a priority.

Nearly two in five enterprises are looking to outsource AI model training and optimization.

67% of enterprises say their biggest fear is deploying AI without proper expertise.

25% of organizations have comprehensive visibility into employee AI use.

39% of digital trust professionals are completely or fairly confident in their organization’s data governance around AI.

The share of organizations citing shadow AI as a definite or probable problem increased from 61% in 2025 to 76%, a 15-point year-over-year increase.

63% of organizations acknowledge that there is "shadow AI" within their organizations.