Cybersecurity statistics / AI Governance

40% of organizations say security policies have not yet been updated to address AI-specific risks.

Publisher	Veeam
Report	Data Trust and Resilience Report 2026
Published	14 April 2026
Topics	AI Governance, Security Policy, AI-Specific Risks

Published by Veeam in Data Trust and Resilience Report 2026, 14 April 2026. The figure is taken from the report as published; the full methodology is in the source.

View the original report

Compare this across sources

12 sources answer what share of organisations have an ai governance policy in place. They report between 18% and 44%, with a median of 36.5%.

See all 12 sources

Related statistics

The share of organizations requiring human review before high-risk AI actions dropped from 40% to 25% in six months.

JumpCloud Inc., 18/07/2026

Organizations have adopted fewer than one-third of standard AI governance and security practices.

JumpCloud Inc., 18/07/2026

Only 21% of organizations have implemented controls for non-human identities (NHIs).

JumpCloud Inc., 18/07/2026

80% of cybersecurity professionals say having clear governance frameworks in place for AI is very important.

ISC2, 18/07/2026

51% of leaders at UK organisations admit that AI usage within their perimeter is entirely unapproved or lacks formal corporate governance.

KnowBe4, 04/07/2026

Responsibility for AI-related data risk is divided across organizations: IT 30.2%, security teams 29.8%, chief data officers 20%, and governance committees 18.7%.

EMA™, 04/07/2026

Get the newsletter

Weekly cybersecurity statistics by email.