Global enterprises struggle with AI maturity and governance

AI governance AI agents ISO/IEC 42001 shadow AI cybersecurity

Global enterprises are navigating a complex transition toward artificial intelligence, characterized by a significant gap between adoption and maturity. While 71 percent of business leaders expect AI and machine learning to impact the global business environment within three years, only 1 percent of companies currently rate their AI implementation maturity as high.

In terms of practical application, an eco e. V. survey reveals that 54 percent of companies are already using or testing AI agents. However, trust remains limited, with only 5 percent of organizations willing to grant AI agents full autonomy. Most companies, approximately 74 percent, restrict AI to supportive roles under human supervision.

Organizational challenges include the rise of ‘shadow AI’—the unauthorized use of AI tools—and the need for robust governance frameworks. The international standard ISO/IEC 42001 is increasingly being adopted to manage AI risks, responsibilities, and transparency. Experts suggest integrating these AI management systems with existing information security standards like ISO/IEC 27001 to ensure data confidentiality and integrity.

Despite the surge in use cases, Gartner reports that only 13 percent of CIOs have achieved significant or transformative value from AI. Success is often tied to establishing clear exit criteria for pilot projects and maintaining rigorous oversight to prevent security vulnerabilities and data breaches.

Entities

Bitkom · First Recon AI · Gartner · Guido Bosbach · Hatem Naguibu · NTT Data · Palo Alto Networks · SOCOTEC Certification Japan · Sysdig · TÜV SÜD · eco e. V. · iSo

Claims

What the coverage asserts, and how many sources carry each claim.

[○ 1 SOURCE] Only 5 percent of companies would allow AI agents to make fully autonomous decisions. www.digitalbusiness-magazin.de
[○ 1 SOURCE] Attackers begin scanning within 15 minutes of a new vulnerability being publicly disclosed. news.mynavi.jp
[○ 1 SOURCE] Only 1 percent of companies rate their AI implementation maturity as high. wp.techtarget.itmedia.co.jp
[○ 1 SOURCE] The success probability of a single AI use case remains at approximately one-fifth. www.all-about-security.de
[○ 1 SOURCE] 54 percent of companies are already using or testing AI agents. www.digitalbusiness-magazin.de
[○ 1 SOURCE] In the fastest intrusion cases, the time from breach to data exfiltration has been reduced to approximately one hour. news.mynavi.jp
[○ 1 SOURCE] Only 13 percent of CIOs report that their companies have achieved significant or transformative value from AI. www.all-about-security.de
[○ 1 SOURCE] 71 percent of business leaders predict AI and machine learning will impact the global business environment within the next three years. wp.techtarget.itmedia.co.jp