IBM Study: Two-Thirds of CIOs Are Accountable for AI They Don’t Control — and Only 11% Are Ready for What Comes Next

Awais Khalid

June 8, 2026

IBM AI control gap study 2026

Summary of Major Developments

  • Global study of 2,000 tech executives published June 8: IBM’s Institute for Business Value, in cooperation with Oxford Economics, published a global study on June 8, 2026, surveying 2,000 senior C-level technology executives — CIOs and CTOs — across 33 geographies and 19 industries. The study was conducted from January to April 2026 and examines how organisations are managing the governance, operational, and financial challenges of scaling AI from experimentation to enterprise-wide deployment.
  • Core finding: 67% accountable for AI they don’t control: Two-thirds of surveyed CIOs and CTOs report being held strictly accountable for AI systems and autonomous agents that they do not fully control. The accountability gap arises because AI is being deployed by business teams across the organisation — in marketing, operations, finance, HR — faster than central IT can track or govern. The majority of respondents (70%) confirm that business teams are deploying AI tools faster than IT can support them.
  • 38% surge in AI agents expected by 2027 — only 11% ready: By 2027, surveyed technology leaders anticipate a 38% increase in the number of autonomous AI agents deployed across their organisations. Against this projected surge, only 11% of CIOs and CTOs say they feel completely prepared for that scale of AI agent deployment. Separately, 77% of organisations report that AI adoption is already outpacing their current governance capabilities, and 80% report CEO-driven AI transformation mandates that are accelerating deployment timelines.

Technical Breakdown: The Governance Architecture Failure

The IBM study’s most significant finding is not the headline accountability gap — it is the causal mechanism that creates it. AI capability in 2026 is embedded in commercial SaaS products, cloud platforms, and business-unit tool selections in a way that bypasses traditional IT procurement and governance gatekeeping. A marketing team that adds an AI writing tool to their workflow, a finance team that enables AI features in their ERP system, a customer service team that deploys an AI chat agent — each of these actions deploys AI capability without necessarily triggering a formal IT review, security assessment, or governance approval. The result, as IBM’s data confirms, is that CIOs and CTOs are responsible for an AI portfolio they did not select, did not configure, and cannot fully see.

The governance architecture failure has a specific structural cause: most organisations built their IT governance frameworks for a world where IT was the bottleneck between vendor and business user. That model assumed IT controlled which software could be installed, which vendors could be engaged, and which data could be accessed by external systems. AI-embedded SaaS eliminates this bottleneck entirely — AI features activate through existing vendor relationships, often with a single settings toggle, and the CIO has no visibility until something goes wrong. IDC research corroborates this: only approximately 16% of organisations have a unified AI governance model, meaning that in 84% of organisations, the CIO owns risk for AI systems they do not directly operate.

IBM’s analysis identifies a meaningful performance differential between organisations that have built control into their AI systems and those relying on manual governance. Organisations with embedded control mechanisms experience 25% fewer AI-related incidents than those using manual governance approaches. This is the study’s most commercially actionable finding: the path to closing the accountability gap is not more governance documentation or approval processes — it is architectural. Control needs to be embedded in AI system design, not bolted on through organisational process.

The agent deployment surge creates a specific governance escalation that traditional IT control models cannot address. An AI agent — unlike an AI feature embedded in a SaaS product — operates autonomously, executes multi-step tasks, accesses APIs and data sources, and takes actions in the real world on behalf of the organisation. An AI agent that books travel, sends emails, executes code, or modifies database records is doing things that have legal, financial, and operational consequences. IBM’s finding that only 11% of CIOs feel completely prepared for a 38% increase in agent deployments indicates that the majority of organisations are approaching an agent deployment surge with governance frameworks designed for passive AI features, not autonomous AI actors.

Key MetricFindingImplication
CIOs accountable for AI they don’t control67% (two-thirds)Governance accountability gap is structural — not exceptional
Business teams deploying AI faster than IT can track70%Shadow AI is the norm, not the exception, in most enterprises
AI adoption outpacing current governance capabilities77%Governance frameworks are already behind — agent surge will widen the gap
CEO-driven AI transformation mandates80%Board-level pressure is accelerating deployment without governance investment
CIOs fully prepared for agent deployment surge11%9 in 10 enterprises lack readiness for the next phase of AI deployment
Expected AI agent increase by 2027+38%Agent governance is the next major IT control challenge
Incident reduction with embedded AI control25% fewer incidentsArchitectural control outperforms process-based governance — build it in
Survey scope2,000 CxOs, 33 geographies, 19 industriesFindings represent broad global enterprise consensus, not single-region data

Commercial and Enterprise Market Impact

IBM’s study is published at a moment when the AI governance technology market is experiencing its fastest growth since the GRC (governance, risk, and compliance) software category emerged in the early 2000s. The accountability gap IBM has quantified — two-thirds of CIOs responsible for AI they did not select and cannot see — is the demand signal that AI governance platforms, AI observability tools, and AI risk management vendors have been waiting for. IBM itself offers watsonx.governance as its response to this market need, giving the study a commercial context that enterprise buyers should acknowledge while still engaging with its findings on their merits.

For enterprise CIOs and CTOs reading this study, the most urgent operational implication is the agent governance gap. The 38% projected increase in AI agent deployments by 2027, against the backdrop of only 11% preparedness, means that 89% of organisations need to develop agent governance frameworks in the next 12 to 18 months — before the agent deployment surge outpaces their control capacity further. Agent governance requires fundamentally different tooling than SaaS AI governance: agents need scope boundaries, action logging, approval workflows for high-stakes decisions, and rollback capabilities that most current IT control frameworks do not provide.

“The 11% preparedness figure for agent deployment is the most important number in the IBM study. It is not measuring how many CIOs have read about AI agents or attended a webinar — it is measuring how many have the structural capability to govern autonomous AI systems operating at scale. That 89% gap represents both a risk and a market opportunity that will define enterprise IT spending priorities for the next three years.” — Enterprise AI Governance Analyst, technology risk research, June 8, 2026

“What IBM is describing as an accountability gap is more precisely an architecture gap. The governance frameworks most organisations built were designed for a world where IT was the procurement gatekeeper. AI has eliminated that gatekeeper role — capability arrives through existing SaaS relationships, not new procurement approvals. The fix is not more process — it is rebuilding governance to work at the edges of the organisation where AI is actually being deployed.” — CIO Advisory Practice Lead, enterprise technology consulting, June 8, 2026

Frequently Asked Questions

What is the IBM AI control gap and why does it matter?

The IBM AI control gap refers to the finding from IBM’s June 8, 2026 global study that two-thirds of CIOs and CTOs are held accountable for AI systems and autonomous agents that they do not fully control. The gap arises because business teams across organisations are deploying AI tools — embedded in SaaS products, cloud services, and business applications — faster than central IT can track or govern. 70% of surveyed technology executives confirm this pattern. The gap matters because it creates accountability without visibility: CIOs are responsible for AI system failures, security incidents, and compliance breaches in systems they did not select, configure, or fully understand.

How big is the AI agent governance challenge heading into 2027?

IBM’s study found that organisations anticipate a 38% increase in autonomous AI agent deployments by 2027. Against this projected surge, only 11% of CIOs and CTOs say they feel completely prepared. 77% of organisations report that AI adoption is already outpacing current governance capabilities — before the agent surge arrives. AI agents represent a qualitatively harder governance challenge than AI features embedded in SaaS: agents execute multi-step tasks autonomously, access APIs and data sources, and take real-world actions with legal, financial, and operational consequences that require scope boundaries, action logging, and rollback capabilities most current IT frameworks do not provide.

What does IBM recommend to close the AI control gap?

IBM’s study recommends embedding control into AI system architecture rather than relying on process-based governance approaches. Organisations that design control into their AI systems experience 25% fewer AI-related incidents than those using manual governance. Practically, this means building AI observability, scope boundaries, and action logging into AI systems at the point of deployment rather than adding governance approval processes after the fact. The full study — including a framework for redesigning governance structures — is available at ibm.com/thought-leadership/institute-business-value/en-us/c-suite-study/cxo.

Sources

IBM Institute for Business Value / PRNewswire. (2026, June 8). New IBM Study Finds CIOs and CTOs Face Growing AI Control Gap as Enterprise Deployment Scales. https://www.prnewswire.com/news-releases/new-ibm-study-finds-cios-and-ctos-face-growing-ai-control-gap-as-enterprise-deployment-scales-302793417.html

IBM Newsroom. (2026, June 8). New IBM Study Finds CIOs and CTOs Face Growing AI Control Gap as Enterprise Deployment Scales. https://newsroom.ibm.com/2026-06-08-new-ibm-study-finds-cios-and-ctos-face-growing-ai-control-gap-as-enterprise-deployment-scales

CIO Magazine. (2026, June 8). CIOs are being held accountable for AI they don’t fully control, IBM study finds. https://www.cio.com/article/4182288/cios-are-being-held-accountable-for-ai-they-dont-fully-control-ibm-study-finds.html

TradingView / PRNewswire. (2026, June 8). New IBM Study Finds CIOs and CTOs Face Growing AI Control Gap. https://www.tradingview.com/news/prnewswire:7668a67a18985:0-new-ibm-study-finds-cios-and-ctos-face-growing-ai-control-gap-as-enterprise-deployment-scales/

Hawkdive. (2026, June 8). IBM Study Reveals AI Control Challenges for CIOs and CTOs in Enterprises. https://www.hawkdive.com/ibm-study-reveals-ai-control-challenges-for-cios-and-ctos-in-enterprises/

IBM. (2026). C-Suite Study — CXO AI Governance Framework. https://www.ibm.com/thought-leadership/institute-business-value/en-us/c-suite-study/cxo