SCW Aug 2026 Main Int - Client Report 2026-Global-AI-Cyber-Maturity-Report -july 29 | Page 13

The AI attack surface is already here, in the tools you ' ve sanctioned, the ones you haven ' t, and a supply chain you can ' t fully see.
AI is the New Supply Chain Risk
Every AI application leans on a chain of external models, APIs, plugins, and data services. The single most common governance finding was insufficient vendor risk management, and most programs were
Nimrod Partush
Chief Innovation & AI Scientist, Cye never built to assess it.

AI Risk Up Close By Function, Industry, and Country

AI RMF 1.0 – Breakdown by Function
Across the four AI RMF functions, one weakness stands out: organizations govern AI risk far better than they manage it, the function that turns awareness into enforcement, response, and recovery.
AI MATURITY BY FUNCTION
13