CyberNew CyberNew
Threat Intelligence & APT Dark Reading 4 weeks ago

EY Survey Finds Autonomous AI Implementation Outpaces Oversight

CN
CyberNew Threat Research Desk
• Original Reporting: Dark Reading
CyberNew Threat Intel Assessment
Assessed Severity: INFORMATIONAL
Impacted Surface
Enterprise Perimeter & Network Defense
Intelligence Sector
Threat Intelligence & APT

Analyst Takeaway

"PRESS RELEASE About half (47%) of respondents say their organization has previously not applied its AI governance process for urgent deployments, despite 98% having formal AI governance policies in place. Agentic AI adoption is creating new governance challenges, with 26% of respondents whose organization uses agentic AI admitting that their organization cannot detect unauthorized AI agents..."

Recommended Defense & Mitigation

  • Threat Monitoring: Ingest published IOCs into SIEM/EDR detection rules for continuous telemetry monitoring.
  • Security Awareness: Alert staff and maintain baseline endpoint hardening across endpoints.
Curated & Verified by CyberNew Threat Intelligence Desk Standard Defense Framework (NIST / MITRE ATT&CK)

PRESS RELEASE

  • About half (47%) of respondents say their organization has previously not applied its AI governance process for urgent deployments, despite 98% having formal AI governance policies in place.

  • Agentic AI adoption is creating new governance challenges, with 26% of respondents whose organization uses agentic AI admitting that their organization cannot detect unauthorized AI agents operating internally.

  • About a third (36%) have experienced an AI incident or failure that caused a materially negative impact to their organization, including data loss, financial damage, brand damage and operational disruptions.

NEW YORK, September 15, 2026 — Although organizations are formalizing AI governance while rapidly deploying AI and autonomous AI agents, many are still struggling to keep policy and practice aligned, according to the new Ernst & Young LLP (EY US) AI Risk and Governance Survey. By surveying 202 senior AI executives (including board members, C-suite, VP+ leaders) at organizations generating at least $1 billion in annual revenue, the study explores how leaders govern AI, including: how quickly governance frameworks are adapting to agentic AI, the extent and impact of AI-related risk, and the role of formal assurance reviews in identifying and correcting issues.

Related:AI Agent Breaches Spanish Organization, Modifies Personal Data

The survey found that while almost all senior AI executives (98%) report having formal AI governance policies in place, about two-thirds of senior AI executives expressed concern over a lack of internal expertise to effectively evolve (69%), implement (63%) or design (63%) AI governance controls at their organization. About half (47%) of the respondents have even admitted that their organization has previously not followed its AI governance process for urgent deployments, even as AI-related incidents, cyber risk and shadow AI have become more common.

“Organizations are applying yesterday’s governance rules to today’s interactions with AI,” said Richard Jackson, EY Americas Assurance Chief Technology Officer and EY Global and Americas Assurance AI Leader. “Boards and C-suites are under immense pressure to accelerate their AI adoption and implement agentic AI systems. Moving fast and applying appropriate governance are not mutually exclusive — both are needed to avoid creating the risks of reputational, financial and operational damage.”

Source Verification & Original Intelligence

This threat report was reviewed by CyberNew analysts and cross-referenced with primary security disclosures from Dark Reading.

Primary Advisory →