70% of Exposed organizations express confidence in their AI governance capabilities, yet only 4% of Exposed organizations have a formal AI governance policy.

37% of CTOs, CISOs, and CIOs describe their organization's AI governance as uneven across teams.

52% of organizations report their use of AI is unapproved or ungoverned.

One in five organizations experienced an LLM security incident in the last year, while a further 18% are unsure and 19% preferred not to answer.

81% of organizations name OSS malware a top security priority.

Fewer than 40% of internal audit leaders believe their internal audit function is adequately prepared to detect AI-enabled fraud.