Cybersecurity statistics / AI Governance

Only 35% of middle market executives report using formal AI governance frameworks.

Publisher	RSM
Report	US Middle Market Business Index Special Report: Cybersecurity 2026
Published	13 May 2026
Topics	AI Governance, Middle Market, US

Published by RSM in US Middle Market Business Index Special Report: Cybersecurity 2026, 13 May 2026. The figure is taken from the report as published; the full methodology is in the source.

View the original report

Compare this across sources

12 sources answer what share of organisations have an ai governance policy in place. They report between 18% and 44%, with a median of 36.5%.

See all 12 sources

Related statistics

The share of organizations requiring human review before high-risk AI actions dropped from 40% to 25% in six months.

JumpCloud Inc., 18/07/2026

Organizations have adopted fewer than one-third of standard AI governance and security practices.

JumpCloud Inc., 18/07/2026

Only 21% of organizations have implemented controls for non-human identities (NHIs).

JumpCloud Inc., 18/07/2026

80% of cybersecurity professionals say having clear governance frameworks in place for AI is very important.

ISC2, 18/07/2026

51% of leaders at UK organisations admit that AI usage within their perimeter is entirely unapproved or lacks formal corporate governance.

KnowBe4, 04/07/2026

Responsibility for AI-related data risk is divided across organizations: IT 30.2%, security teams 29.8%, chief data officers 20%, and governance committees 18.7%.

EMA™, 04/07/2026

Get the newsletter

Weekly cybersecurity statistics by email.