Cybersecurity statistics / AI Governance

Only 18% of organizations automatically block unauthorized AI domains.

Publisher	Optro
Report	Human behavior: The AI risk surface GRC can't ignore
Published	12 May 2026
Topics	AI Governance, AI Domains

Published by Optro in Human behavior: The AI risk surface GRC can't ignore, 12 May 2026. The figure is taken from the report as published; the full methodology is in the source.

View the original report

Compare this across sources

12 sources answer what share of organisations have an ai governance policy in place. They report between 18% and 44%, with a median of 36.5%.

See all 12 sources

Related statistics

The share of organizations requiring human review before high-risk AI actions dropped from 40% to 25% in six months.

JumpCloud Inc., 18/07/2026

Organizations have adopted fewer than one-third of standard AI governance and security practices.

JumpCloud Inc., 18/07/2026

Only 21% of organizations have implemented controls for non-human identities (NHIs).

JumpCloud Inc., 18/07/2026

80% of cybersecurity professionals say having clear governance frameworks in place for AI is very important.

ISC2, 18/07/2026

51% of leaders at UK organisations admit that AI usage within their perimeter is entirely unapproved or lacks formal corporate governance.

KnowBe4, 04/07/2026

Responsibility for AI-related data risk is divided across organizations: IT 30.2%, security teams 29.8%, chief data officers 20%, and governance committees 18.7%.

EMA™, 04/07/2026

Get the newsletter

Weekly cybersecurity statistics by email.