An analysis of IBM’s 2026 Cost of a Data Breach report indicates a significant governance gap surrounding artificial intelligence. The study, which examined 602 organizations across 16 countries and 17 industries, reported that the global average cost of a data breach reached $4.99 million, marking a 12% increase and the highest figure recorded across 21 editions. In the United States, the average cost reached a record $11.5 million.
A key finding concerning AI governance revealed that two-thirds of organizations suffering a breach lacked an established AI governance policy. Specifically, 35% of these organizations reported having no policy whatsoever, while another 33% indicated that a policy was still under development. The report further highlighted that security controls are weakening; five of the six measured AI governance controls saw a decline in adoption.
While identity and access management was noted as a significant cost reducer, only 40% of all breached organizations reported applying access controls to AI models and data. The risk associated with unapproved AI usage, or “shadow AI,” also increased substantially, accounting for 43% of incidents this year compared to 20% the previous year. Furthermore, security incidents involving an AI model or application constituted 21% of all breaches, up from 13%.
The data suggests that while the financial exposure from a data breach is widening, the implementation of formal policy and robust controls remains insufficient across the surveyed population.
Topics: #policy #ibm #breach
An analysis published by IBM’s 2026 Cost of a Data Breach report indicates a substantial governance gap surrounding artificial intelligence. The study, which surveyed 602 organizations across 16 count
What specific governance measures should organizations implement to mitigate the risks associated with AI-related data breaches?