European Firms Lack AI Governance Amid Rapid Adoption

• •59% of European firms are unsure how to halt AI systems during incidents.
• •Only 21% can stop AI systems within 30 minutes of a crisis.
• •42% lack confidence in investigating AI-related incidents.

A survey by ISACA reveals that many European organizations are adopting AI systems without adequate governance and safety measures. Out of 681 surveyed digital trust professionals, 59% are unsure how quickly they could halt an AI system during a security incident, with only 21% able to do so within 30 minutes. This lack of preparedness raises concerns about operational resilience and accountability as AI becomes integral to business functions. The survey also found that 42% of respondents lack confidence in their ability to investigate serious AI incidents, and 33% do not require staff to disclose AI usage in work products. Additionally, 20% of organizations are uncertain about who is accountable when AI systems fail. The findings highlight a significant gap between AI deployment and the governance structures necessary to manage associated risks, especially as the EU AI Act mandates transparency and accountability in AI usage. Chris Dimitriadis from ISACA emphasized the need for organizations to prioritize governance alongside innovation.