Amid nonstop headlines and hype, what’s really happening with AI inside organizations today?

AI promises transformation—but the reality is more complex. ISACA’s 2026 AI Pulse Poll cuts through the noise to reveal how organizations are actually using AI right now, based on real-world input from practitioners across the globe. The findings show widespread adoption, growing reliance on generative AI and rising expectations for AI skills—alongside persistent gaps in governance, training and risk management.

The results reveal a clear theme: AI adoption is accelerating faster than organizational readiness. While more organizations are putting policies in place and prioritizing AI risk, many still lack clear controls, tested response plans and measurable ROI. The 2026 AI Pulse Poll separates hype from reality—highlighting what’s working, what’s lagging and where focused action is urgently needed. Among the insights revealed:

Expert Insights

Ulrika Dellrud
AI adoption is accelerating far ahead of governance, and the numbers are stark — only 38% of organizations have comprehensive AI policies, yet usage is already pervasive across the enterprise. Perhaps most alarming is that only 11% of practitioners strongly agree that organizations are giving sufficient attention to ethical standards in AI implementation, a signal that the human and societal dimensions of AI remain dangerously underweighted in boardrooms today. Boards cannot remain passive observers; directors must become AI-literate and actively engaged in overseeing risk, ethics, and resilience — because with only 38% of practitioners confident in their board’s understanding of AI risks, the leadership deficit is as real as the technology one. Effective AI governance also starts with mastering your data: without strong data and privacy governance as a foundation, organizations cannot manage AI risk, ensure trust, or unlock sustainable value. The path forward is clear: AI success will depend not just on innovation, but on disciplined governance, informed leadership and responsible data stewardship.
Ulrika Dellrud
Chief Privacy and Data Ethics Officer, Smarter Contracts
Keith Bloomfield DeWeese
There is enormous pressure on organizations to show that AI is paying off, but the 2026 AI Pulse Poll reveals a more honest picture: most organizations aren’t yet sure whether it has. That uncertainty isn’t a failure of AI, but a reflection of how hard it is to build something that actually works at scale. The thing with ROI in AI is that it doesn’t arrive on schedule; it’s not a switch that can be flipped: it’s the result of sustained investment in the people, processes and governance structures that make intelligent systems reliable. The organizations that resist the urge to declare victory too early are the ones most likely to get there.
Keith Bloomfield DeWeese
Senior Manager of AI Product Development, ISACA
Tamim Ahmed
ISACA’s 2026 AI Pulse Poll makes one point unmistakably clear: AI adoption is accelerating faster than cybersecurity readiness. That does not mean organizations should step back from AI. It means they should close the gap between usage and control before that gap widens further. In the years ahead, the organizations that benefit most from AI are likely to be those that treat security, governance and response capability not as barriers to innovation, but as the conditions that make trustworthy innovation possible.
Tamim Ahmed
CISM, CRISC, PMP
CICISO Cybersecurity & Risk Management Specialist