24% of organizations say they have no AI-specific access controls

16% of organizations enforce AI access controls consistently across the environment