Technology leaders are being held responsible for AI systems they do not fully oversee, according to a new IBM Institute for Business Value survey of 2,000 technology executives. The findings, reported by CIO on 8 June 2026, describe a governance gap that is already translating into operational consequences — and that has direct implications for any business deploying AI at work.
The accountability gap, in numbers
Two-thirds of CIOs and CTOs are being held accountable for AI systems they do not fully control, the IBM survey found. That is not a fringe problem. It is the majority experience.
Refer & earn: 30% of a client’s first month, then 10% of every month after that, for up to 24 months per client. See the partner programme →
The survey also found that 70% of respondents said technology is being deployed across the business faster than IT can track it, while 77% said AI adoption is already outpacing governance capabilities. In other words, the tools are arriving faster than the rules and oversight designed to manage them.
Executives surveyed expect the number of AI agents deployed within their organizations to increase by 38% by 2027, yet only 11% said they are fully prepared for the scale of AI-agent deployment they expect over the next year. According to IBM, 80% of respondents also reported CEO-driven mandates to accelerate AI transformation efforts. The pressure to move fast is coming from the top, even as the readiness to govern that speed lags behind.
Why control is slipping away
The survey findings resonated with analysts who said the accountability gap highlighted by IBM is becoming increasingly common as AI adoption expands across business functions.
“AI capability is now embedded in SaaS, cloud, and business-led projects, so adoption happens at the edges of the organization while accountability stays at the top,” said Deepika Giri, AVP for Big Data and AI Research Lead at IDC Asia/Pacific. IDC research shows that only about 16% of organizations have a unified AI governance model, so the CIO owns risk for systems they don’t directly operate.
“Enterprises have decentralised experimentation far faster than they have decentralised accountability,” said Sanchit Vir Gogia, chief analyst at Greyhound Research. “Control becomes shared the moment AI touches several platforms at once. Accountability does not move with it.”
According to analysts, AI is increasingly being embedded into enterprise applications, SaaS platforms, cloud services, developer tools, and business workflows that sit outside traditional IT governance structures.
“AI adoption is business-led, embedded in SaaS, cloud platforms, and developer tools, bypassing central IT with growing shadow AI,” said Charlie Dai, principal analyst at Forrester. “CIOs retain accountability for risk and cost but lack control due to federated models and hyperscaler-led abstraction.”
The result is that technology leaders often remain responsible for risk, compliance, and business outcomes even when critical aspects of deployment sit outside their direct control.
Rajesh Ranjan, managing partner at Everest Group, said many organizations now expect CIOs to deliver AI-driven business outcomes even though success frequently depends on process redesign, workforce changes, and operating model shifts that extend beyond IT’s direct remit. Ranjan said AI adoption is advancing faster than enterprises’ ability to establish governance and accountability frameworks, creating “a growing disconnect between responsibility and control.”
Shadow AI: unmanaged judgment
The analysts said the accountability challenge becomes more acute as AI adoption spreads through tools and services that business teams can access without significant IT involvement.
“Traditional shadow IT introduced unmanaged software. Shadow AI introduces unmanaged judgment,” Gogia said.
Businesses can now access AI capabilities through embedded SaaS functionality, external tools, APIs, copilots, and agent frameworks with little IT involvement, analysts said, expanding the challenge beyond traditional technology governance.
Dai said the risks extend beyond security and compliance to include unmanaged costs, regulatory exposure, prompt injection attacks, and vulnerabilities at the agent layer.
The challenge grows further as organizations move from AI assistants toward AI agents capable of making decisions, invoking tools, interacting with enterprise systems, and carrying out multistep tasks with limited human intervention.
“Agentic AI introduces dynamic, non-deterministic behavior and external interactions, breaking traditional governance models,” Dai said. “Enterprises lack real-time traceability into decisions, creating misalignment between accountability and actual system behavior.”
What the incidents look like
The survey suggests those governance challenges are already translating into operational consequences.
“By 2027, enterprises expect to deploy an average of 1,661 AI agents—a 38% increase from today,” the report said. “At that rate, tech leaders are tasked with managing hundreds of thousands of autonomous decisions daily. And manual governance can’t keep up with that math.”
Surveyed organizations reported an average of 54 AI-agent incidents during the past year that required human intervention or correction. Seventeen percent of those incidents were classified as high severity.
Among high-severity incidents, 37% resulted in data exposure or security breaches, 33% caused cascading system failures, and 17% triggered compliance issues, according to IBM.
The study also found that 59% of respondents view security and compliance concerns as among the biggest barriers to scaling AI agents. Organizations that embed governance directly into AI systems reported 25% fewer AI-related incidents than those relying primarily on manual oversight.
“This is why visibility now matters more than authority,” Gogia said. “Technology leaders do not need to approve every deployment. They need to know what is running, what it can reach, and how to stop it.”
What business leaders should do now
The analysts said enterprises will need to move beyond governance models designed for periodic reviews and traditional software deployments.
“As AI becomes embedded in core business processes, governance can no longer be a periodic review exercise; it must become an operational capability,” Ranjan said.
Dai said enterprises should also prioritize centralized observability, policy controls, governed decentralization, and stronger data and context governance as AI adoption scales.
For a business reader deciding what to do about AI at work, the practical takeaways are clear. First, assume that AI is already in use across your organization, whether or not IT knows about it. The IBM data shows that most technology leaders are accountable for systems they do not fully control, and that adoption is happening at the edges. Second, treat governance as an operational capability, not a periodic audit. The survey found that embedding governance directly into AI systems is associated with 25% fewer AI-related incidents. Third, focus on visibility. As Gogia put it, leaders do not need to approve every deployment; they need to know what is running, what it can reach, and how to stop it.
These are not abstract concerns. The average organization reported 54 AI-agent incidents in the past year that required human intervention or correction, and 17% of those were high severity. Among high-severity incidents, more than a third resulted in data exposure or security breaches. The cost of unmanaged AI is already being paid.
Faida Workforce advises organizations on AI adoption and workforce planning. We help clients map where AI is being used, establish governance that fits their operating model, and prepare teams for the shift from assistants to agents. If you are working through these questions, we are glad to share what we are seeing. This article is editorial, not a sales pitch; our services are one option among many.
Sources
- CIOs are being held accountable for AI they don’t fully control, IBM study finds — CIO, 8 June 2026.
By Faida Workforce Editorial. AI tools assist in production; a human editor is accountable for the final article.
30% of their first month, then 10% every month after that
Refer a business to Faida Workforce and you earn 30% of the client’s first paid month, then 10% of every month for up to 24 months per client — rising to 15% from the accrual after you pass 10 active clients. Paid by PayPal, batched on the 1st.
10 Pro clients = $2,598.70 over 24 months — $3,748.13 at the 15% tier.
Figures are potential earnings worked from the published rates, assuming every referred client pays for the whole cap — not a promise, not an average. The $1 trial is never commissionable.
