Just 46% of risk leaders say their organizations have trained employees on how to evaluate AI outputs in terms of what to trust versus challenge, according to the 2026 New Generation of Risk Report, released today by Riskonnect. The proprietary research is based on a global survey of more than 250 risk, compliance, and resilience professionals. The study uncovered critical gaps in how organizations are governing AI and preparing employees to use it responsibly. Less than half of companies have trained employees on how to evaluate AI outputs new Riskonnect research finds.
Just 46% of risk leaders say their organizations have trained employees on how to evaluate AI outputs in terms of what to trust versus challenge, according to the 2026 New Generation of Risk Report, released today by Riskonnect.
Only 17% of risk leaders say they feel very prepared to manage AI and AI governance risks. While 66% of organizations have trained employees on rules, responsibilities, and defined roles around AI oversight and accountability, the data suggests fewer have gone deeper to provide training on practical skills or specific risks.
"An AI policy sets the rules. Training gives employees the practical knowledge to apply those rules in their day-to-day work. As AI permeates every corner of the organization, employees need to know how to validate what AI gives them, recognize the risks, and make responsible decisions. Pairing strong governance and policies with useful training allows organizations to accelerate AI innovation while minimizing risk to the enterprise," said Jim Wetekamp, Riskonnect's CEO.
The report also reveals:
AI policies aren't specific enough. Seventy-two percent of risk leaders have a policy governing employee AI use, up from 58% last year. But only 54% say they have clear policies and guidelines on what AI tools can be used and how they can be used.
Agentic AI risk assessments are lagging. Fifty-eight percent of the companies considering incorporating agentic AI solutions into their operations or products haven't assessed the risks.
Economic risk has caught up to cybersecurity as a top corporate threat. The percentage of risk leaders saying economic risk is having a "severe" or "significant" impact on their business is now tied with cybersecurity at 55%. Cybersecurity held the top spot for the past two years.
Geopolitical volatility is taking a toll on companies. The impacts hitting the hardest are higher operating or production costs (65%), increased cybersecurity threats or attacks (58%), supply chain and shipping disruptions or delays (50%), and increased energy costs (49%).
Risk Professionals Are Under Pressure
Seventy-five percent of risk leaders say pressure has increased on their role over the past year. Thirty-seven percent say the pressure is "high" or "extreme." Yet only 25% saw their risk management technology budget grow in the past six months.
Risk teams are combatting the pressure and workload by leaning harder into AI to see more and move faster. Seventy-four percent of risk leaders currently or plan to use AI for risk management, up from 70% in 2025 and 62% in 2024.
"Risk teams are shouldering a lot more than a few years ago as risk velocity accelerates. The teams putting AI to work are best equipped to carry that load and prove how indispensable they are," added Wetekamp.
About Riskonnect
Riskonnect is the leading provider of software that brings risk under one roof. Technology empowers organizations to anticipate manage respond real time strategic operational risks across extended enterprise more than 2,700 customers six continents 1,500 experts.
