EY Survey Finds Autonomous AI Implementation Outpaces Oversight

Rapid Adoption of Autonomous AI Leaves Organizations Behind in Governance

A new survey has revealed a concerning trend among organizations rapidly deploying autonomous artificial intelligence (AI) systems. Despite having formal AI governance policies in place, many senior executives admit that their processes and controls are not keeping pace with the rapid adoption of these cutting-edge technologies.

The EY US AI Risk and Governance Survey, conducted among 202 senior AI executives at organizations generating over $1 billion in annual revenue, sheds light on the challenges of governing autonomous AI. While almost all respondents (98%) report having formal AI governance policies, a significant proportion admit to not following their own guidelines when deploying AI systems urgently.

The survey’s findings are alarming: nearly half (47%) of respondents have admitted that their organization has previously not applied its AI governance process for urgent deployments. This lack of adherence to established policies is especially concerning given the growing prevalence of AI-related incidents, cyber risk, and shadow AI – a term used to describe unauthorized AI agents operating within an organization.

The issue lies in the rapid adoption of agentic AI, which allows systems to execute critical actions without real-time human involvement. While this technology has numerous benefits, it also introduces new governance challenges. A significant proportion (49%) of respondents whose organization uses agentic AI report that their existing governance framework has not yet been updated to specifically include agentic AI requirements and risks.

Moreover, as organizations scale autonomous AI adoption, critical visibility gaps are emerging. Approximately one-quarter (26%) of senior AI executives whose organization uses agentic AI admit that they cannot detect unauthorized AI agents operating internally. This lack of oversight increases the risk of reputational, financial, and operational damage.

“The biggest agentic AI risk is that human oversight hasn’t evolved accordingly,” said John McLain, EY Americas Assurance Technology Risk AI Leader and EY Americas Assurance AI Deputy Leader. “AI governance provides the necessary guardrails that allow organizations to move quickly without losing control, especially when agentic AI is already making real business decisions.”

The survey’s findings have significant implications for organizations seeking to leverage autonomous AI effectively while minimizing risks. As Richard Jackson, EY Americas Assurance Chief Technology Officer and EY Global and Americas Assurance AI Leader, noted: “Boards and C-suites are under immense pressure to accelerate their AI adoption and implement agentic AI systems. Moving fast and applying appropriate governance are not mutually exclusive – both are needed to avoid creating the risks of reputational, financial, and operational damage.”

Ultimately, organizations must prioritize the development of effective governance frameworks that can keep pace with the rapid evolution of autonomous AI technologies. By doing so, they can minimize the risk of unforeseen consequences and maximize the benefits of these cutting-edge systems.

For security-conscious readers, this survey serves as a stark reminder to reassess their organization’s approach to governing autonomous AI. As we continue to rely on these powerful technologies, it is essential that we prioritize robust governance frameworks that align with the evolving needs of agentic AI adoption. By taking proactive steps to address these challenges, organizations can mitigate the risks associated with autonomous AI and unlock its full potential for driving innovation and growth.


Source: Dark Reading — 2026-09-18