Key Insights
Risk thrives in the gap between awareness and action.
The same weakness runs through both frameworks. Governance scores highest but the functions that turn awareness into action, Protect in cyber and Manage in AI, score lowest. The evidence is clear: knowing the risk isn ' t the problem. Acting on it is.
AWARENESS VS ACTION ACROSS BOTH FRAMEWORKS
AI adoption has outpaced AI security.
88 % of organizations are using AI( McKinsey: The State of AI in 2025), yet their average AI risk maturity is stuck at the‘ reactive’ level- scoring just 2.35 out of 5.0.
4