New Pathlock research finds 23% of organizations have already experienced AI-incidents, yet 79% have no dedicated AI governance team.
DENVER, July 30, 2026 /PRNewswire/ -- Pathlock, the global leader in ERP Security and Controls Automation, today released new research revealing a widening governance gap as enterprises deploy AI agents into core business processes, including finance, procurement, and human resources. TheAI Governance Gap Report finds that AI agents — the fastest-growing class of non-human identities (NHIs) — are not only assisting employees with productivity tasks; they are actively approving transactions, modifying vendor records, and executing cross-system workflows at a speed no human could match, often without adequate oversight, traceability, or accountability structures in place.
Most alarmingly, the damage is already happening. 23% of organizations surveyed have already experienced at least one AI incident requiring investigation and remediation. Worryingly, known incidents are likely only the tip of the iceberg. More than half (51%) aren't confident they know all the AI agents operating in their systems, and 31% are unsure whether incidents have occurred at all. With visibility this limited, the true scale of AI-driven irregularities is almost certainly higher than what's been formally reported.
AI Agents Have Crossed into Financial Controls Territory
Unlike traditional non-human identities such as service accounts, AI agents can make contextual decisions and execute multi-step business processes across applications.
The report documents a decisive shift in how AI agents are being used inside enterprise environments. While early AI deployments focused on analytics and data summarization, organizations are now granting AI agents powers traditionally reserved for human employees with financial authority:
- 38% of organizations allow AI agents to create and modify business records
- 28% allow AI agents to approve transactions
- 35% allow AI agents to execute cross-system workflows
- 36% have already embedded or are currently implementing AI agents in finance and accounting
Perhaps most striking, 25% of organizations allow AI agents to access backend databases directly, increasing the risk of changes that bypass application-level business logic.
"Three forces are converging — the explosion of identities, increasingly interconnected business applications, and AI agents that can now execute business processes autonomously at machine speed. Together, they're transforming governance from an IT discipline into a business imperative. As AI agents begin influencing financial outcomes, governance becomes a matter of business risk, financial integrity, and regulatory compliance."
— Chris Radkowski, GRC Expert at Pathlock
Governance Has Not Kept Pace
Despite this rapid expansion of AI agent authority, the research reveals that most organizations lack the governance infrastructure required to manage the risks that come with it:
- 79% of organizations have no dedicated AI governance team or officer
- 52% cannot verify actions Al agents execute across business systems
- 48% cannot trace AI agent activity end-to-end across systems
The investigation gap is particularly acute. If a questionable AI-driven action were flagged today, only 13% of organizations could investigate it in real time, and only 18% could complete an investigation within hours. Nearly a quarter (22%) could not reliably investigate at all.
"For decades, governance focused on controlling who could access a system. AI agents introduce a different challenge: understanding what actually happened after access was granted. The organizations best prepared for AI will be those that can verify, trace, investigate, and explain AI-driven actions in real time across their entire business application landscape, regardless of how many data sources must be correlated to reconstruct the full picture."
— Susan Stapleton, GRC Expert at Pathlock
About the Research
Pathlock surveyed 286 IT, compliance, and security decision-makers in May 2026. Respondents represented organizations across North America (57%), Asia-Pacific (21%), and EMEA (14%), spanning industries including manufacturing, financial services, technology, healthcare, and government. The report also outlines five governance priorities for organizations deploying AI agents, covering accountability structures, least-privilege access, visibility into AI-driven activity, traceability, and incident response readiness.
The full report is available for download at https://pathlock.com/resources/ebooks/2026-ai-governance-gap-report/.
ABOUT PATHLOCK
Pathlock is the global leader in ERP Security and Controls Automation, trusted by Global 2000 organizations running the world's most complex SAP, Oracle, and Workday environments. By converging identity, governance, and assurance on a single platform, Pathlock helps enterprises prevent fraud, pass audits, and govern every identity — human and non-human — and every transaction they execute, at scale. Learn more at pathlock.com.
Media Contact
View original content to download multimedia:https://www.prnewswire.com/news-releases/enterprises-are-handing-ai-agents-financial-workflows-while-more-than-half-cant-fully-verify-their-actions-302838770.html
SOURCE Pathlock
