New IBM Study Finds CIOs and CTOs Face Growing AI Control Gap as Enterprise Deployment Scales

The accelerating integration of Artificial Intelligence (AI) into enterprise operations is creating unprecedented challenges for Chief Information Officers (CIOs) and Chief Technology Officers (CTOs), particularly in the realm of security and governance. A new study released by IBM's Institute for Business Value on June 8, 2026, reveals a significant and growing "AI control gap" that is impeding organizations' ability to scale their AI initiatives securely and compliantly. According to the research, a substantial 59% of surveyed tech executives cite security and compliance concerns as the primary impediments to the broad adoption and effective scaling of AI agents within their enterprises. The study's findings provide a stark illustration of the escalating risks associated with current AI deployments. On average, organizations reported experiencing 54 AI agent-related incidents over the past year. These incidents, characterized as unintended or harmful occurrences necessitating human intervention, highlight the inherent vulnerabilities in existing AI frameworks. A particularly alarming 17% of these reported incidents were classified as high-severity, requiring more than four hours to effectively contain and remediate. The consequences of these incidents were varied and impactful, with 37% resulting in critical data exposure or security breaches, 33% leading to cascading system failures, and 17% triggering significant compliance issues. These statistics unequivocally point to a pressing need for a fundamental shift in how enterprises approach AI deployment. The traditional strategy of retrofitting security and governance measures post-deployment is proving inadequate in the face of increasingly autonomous and rapidly evolving AI agents. The IBM study strongly advocates for the embedding of control and visibility directly into AI systems from their initial design phases, deeming this approach essential for confident and secure scaling. The analysis within the report clearly demonstrates the advantages of this proactive stance compared to organizations that rely on manual governance. Enterprises that integrate robust control mechanisms into their AI systems from the outset experience a remarkable 25% reduction in incidents. Furthermore, these organizations are significantly better equipped to manage the complex operational and security risks that are an inherent part of scaling AI. The financial implications of this control gap are also considerable. The study projects a substantial surge in AI spending, with AI budgets expected to climb from just under 15% of IT budgets in 2025 to nearly 25% by 2027 – an impressive 71% increase within a mere two years. This escalating investment intensifies the pressure on CIOs and CTOs, who are responsible for ensuring that these expenditures translate into secure and compliant outcomes. However, the report indicates that a vast majority of tech executives, 84%, have not fully operationalized AI financial management, and an even higher percentage, 85%, lack complete real-time visibility into their AI expenditures. This deficiency in financial oversight can exacerbate security risks by making it challenging to effectively track, manage, and secure all AI-related assets and processes. The IBM study also establishes a clear correlation between strong financial discipline and successful AI scaling. Organizations that demonstrate robust financial management practices are found to deploy 2.4 times more AI agents without increasing their AI/IT budget. They are also three times more likely to report being fully prepared for AI at scale. Moreover, the analysis reveals that organizations that build control into their AI systems deploy 16 times more AI agents, achieve 18% higher operating margins, and spend four times less of their AI budget. These findings underscore that effective governance and security are not merely overheads but rather crucial enablers of efficiency, innovation, and profitability in the burgeoning AI era. The report serves as a critical call to action for enterprise leaders. As AI continues to become more deeply embedded in core business functions, the imperative to establish comprehensive control and governance frameworks becomes non-negotiable. This encompasses developing robust security protocols specifically tailored for AI agents, ensuring adherence to evolving regulatory landscapes, and fostering a culture of proactive risk management. The insights gleaned from IBM's study offer a vital roadmap for CIOs and CTOs to navigate the complexities of AI deployment, urging them to prioritize embedded security and governance to unlock AI's full potential while effectively mitigating its inherent risks. The future success of enterprise AI hinges on the ability to bridge this control gap, transforming potential vulnerabilities into opportunities for secure and sustainable innovation.