TLDR: New research reveals that while 93% of UK organizations have embraced Artificial Intelligence, a significant majority lack the necessary governance frameworks to manage associated risks effectively. Only 7% have fully embedded AI governance, highlighting a critical gap between the speed of AI adoption and the implementation of proper oversight and risk management within software development processes.
A recent study, the Trustmarque AI Governance Index 2025, has brought to light a significant disparity in the United Kingdom’s corporate landscape: a widespread adoption of Artificial Intelligence (AI) without commensurate governance. The research indicates that a staggering 93% of UK firms are currently utilizing AI in some capacity. However, this rapid integration is largely unaccompanied by robust frameworks to manage the inherent risks, with most organizations failing to integrate AI governance into their existing software development processes.
The findings paint a concerning picture of oversight deficiencies. Only a mere 7% of surveyed organizations have fully embedded governance frameworks specifically designed to manage AI risks. Furthermore, the technological infrastructure supporting AI initiatives appears largely unprepared, as only 4% of firms consider their technology infrastructure fully ‘AI-ready’. The integration of AI governance into the software development lifecycle is similarly low, standing at just 8%.
The report highlights that many organizations continue to rely on legacy software development processes that have not been updated to account for AI-specific risks, such as model bias or explainability gaps. This oversight is evident in testing practices: only 28% of firms apply bias detection during testing, and an even smaller 22% test for model interpretability.
Infrastructure and tooling also present significant barriers to effective governance. A mere 4% of organizations report that their data and infrastructure environments are fully prepared to support AI at scale. Essential governance tools like registries, audit trails, and version control for AI models are frequently manual or entirely absent.
Responsibility for AI oversight within organizations is often fragmented. The study found that only 9% of firms report clear alignment between IT leadership and governance functions, while a notable 19% admit there is no clear owner for governance activities. Executive engagement in AI governance remains low, with most initiatives being driven at the departmental level rather than through strategic leadership.
Seb Burrell, Head of AI at Trustmarque, underscored the urgency of the situation, stating, “Our report shows that AI adoption is outpacing governance. It’s a clear gap — 93 percent of organisations are using AI but only seven percent have fully embedded governance frameworks. Right now, systems and processes haven’t kept up with the speed of innovation. Development teams lack proper tooling and infrastructure, and the issues are compounded by the lack of management buy-in for building robust governance systems.”
Also Read:
- UK Businesses Lag in AI Agent Adoption, Jeopardizing Billions in Economic Value
- South African Businesses Rapidly Adopt Generative AI Amidst Governance Gaps
Despite the challenges, Burrell emphasized the benefits of proactive governance: “Governance is also often seen as a constraint, but our findings suggest otherwise. Organisations that have adopted AI governance are seeing real, tangible benefits — faster deployments, stronger accountability, and reduced manual review cycles. It’s a vital support function to enable responsible, scalable AI.” The findings suggest that while AI offers immense potential, its responsible and scalable deployment hinges on the urgent establishment of comprehensive governance frameworks.
