Cybersecurity statistics / AI Governance

97% of organizations claim they have certified model governance.

Publisher	JFrog
Report	2026 Software Supply Chain Security State of the Union
Published	20 May 2026
Topics	AI Governance, Model Risk

Published by JFrog in 2026 Software Supply Chain Security State of the Union, 20 May 2026. The figure is taken from the report as published; the full methodology is in the source.

View the original report

Compare this across sources

12 sources answer what share of organisations have an ai governance policy in place. They report between 18% and 44%, with a median of 36.5%.

See all 12 sources

Related statistics

The share of organizations requiring human review before high-risk AI actions dropped from 40% to 25% in six months.

JumpCloud Inc., 18/07/2026

Organizations have adopted fewer than one-third of standard AI governance and security practices.

JumpCloud Inc., 18/07/2026

Only 21% of organizations have implemented controls for non-human identities (NHIs).

JumpCloud Inc., 18/07/2026

80% of cybersecurity professionals say having clear governance frameworks in place for AI is very important.

ISC2, 18/07/2026

51% of leaders at UK organisations admit that AI usage within their perimeter is entirely unapproved or lacks formal corporate governance.

KnowBe4, 04/07/2026

Responsibility for AI-related data risk is divided across organizations: IT 30.2%, security teams 29.8%, chief data officers 20%, and governance committees 18.7%.

EMA™, 04/07/2026

Get the newsletter

Weekly cybersecurity statistics by email.