AI Use Accelerates, While Governance and ROI Lag, Says New ISACA Research

SCHAUMBURG, Ill.--(BUSINESS WIRE)--While 90 percent believe employees are using artificial intelligence in their organization, only 22 percent say AI return on investment (ROI) has met or exceeded their expectations, according to ISACA’s new 2026 AI Pulse Poll.

With responses from more than 3,400 digital trust professionals across IT audit, governance, cybersecurity, privacy and emerging technology roles, ISACA’s poll finds that AI has become embedded in day-to-day work; however, governance and operational readiness continue to lag.

While AI policies are becoming more commonplace, only 38 percent of organizations have a formal, comprehensive AI policy—up from 28 percent in 2025. Thirty percent say they have a limited policy in place, and a quarter (25 percent) have no active policy.

There also appears to be some uncertainty around the ROI for AI:

• 23 percent say they believe it is too early to tell the ROI
• 22 percent say they do not know the ROI
• 20 percent cite limited ROI so far
• Only 22 percent indicate AI ROI has met or exceeded their expectations

“There's enormous pressure on organizations to show that AI is paying off, but the pulse poll reveals a more honest picture: most organizations aren’t yet sure whether it has,” says Keith Bloomfield-DeWeese, Senior Manager of AI Product Development at ISACA. “That uncertainty isn’t a failure of AI, but a reflection of how hard it is to build something that actually works at scale. The organizations that resist the urge to declare victory too early are the ones most likely to get there.”

Increased use, demand for AI skills

Most respondents note that AI literacy is vital, with 78 percent saying AI skills are very or extremely important to their profession, up from 72 percent last year. This high demand for AI skills on the job is also reflected by 33 percent saying that their organizations train all employees on AI, up from 22 percent in 2025.

And while 36 percent say their organization will increase AI-related jobs in the next 12 months, up from 31 percent in 2025, workloads do not appear to be decreasing due to AI. Nearly seven in 10 say job responsibilities have increased or have not changed in the last year.

Areas for improvement

Forty-five percent note that AI risks are an immediate priority, and 38 percent say they are confident in their board’s understanding of and action against AI risks. Respondents’ most-cited AI risks include:

• Misinformation and disinformation (82%)
• Privacy violations (74%)
• Social engineering (60%)
• Loss of intellectual property (58%)
• Job displacement (42%)

“With only 38 percent of practitioners confident in their board’s understanding of AI risks, the leadership deficit is as real as the technology one,” says Ulrika Dellrud, Chief Privacy and Data Ethics Officer, Smarter Contracts, and ISACA Emerging Trends Working Group member. “The path forward is clear: AI success will depend not just on innovation, but on disciplined governance, informed leadership and responsible data stewardship.”

Additionally, while 41 percent say they are confident in their own ability to detect AI‑powered misinformation (up from 30 percent in 2025), only 36 percent are confident in their organization's ability to detect AI-powered misinformation.

There are also bigger-picture questions to consider. Seventy-seven percent also say that they consider the environmental concerns associated with using AI within their organization. And only 11 percent strongly agree that organizations are giving sufficient attention to ethical standards related to AI implementation.

AI Resources, Training

ISACA offers a range of AI courses and resources, as well as three new credentials: Advanced in AI Audit (AAIA), Advanced in AI Security Management (AAISM) and Advanced in AI Risk (AAIR).

Access ISACA’s 2026 AI Pulse Poll and related resources at www.isaca.org/ai-pulse-poll.

About ISACA

For more than 55 years, ISACA^® (www.isaca.org) has empowered its community of 195,000+ members in more than 190 countries with the knowledge, credentials, training and network they need to thrive in fields like information security, governance, assurance, risk management, data privacy and emerging tech. Through the ISACA Foundation, ISACA also expands IT and education career pathways, fostering opportunities to grow the next generation of technology professionals.