Companies are spending more on AI governance and getting less control
Companies increase AI governance spending but struggle to maintain control over AI tool usage.
A DNSFilter report reveals that companies are allocating more budget to AI security and governance, yet many struggle with visibility and control. Employees often connect AI tools to corporate systems without proper IT notification or approval, leading to security incidents and untracked costs. Network activity data suggests significantly higher AI tool usage than reported by IT departments, indicating a gap between governance spending and actual control.
AI summary of the linked source. Not reviewed by an editor. How this works
Run DNSFilter?
Get an email when a new story names DNSFilter, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonDespite increased investment in AI governance, organizations are losing visibility into which AI tools employees are connecting to corporate systems, creating a classic shadow IT problem at scale. Employees are bypassing IT approval processes and integrating unauthorized AI services directly into corporate environments, exposing sensitive data and creating untracked costs and risks. Network activity consistently shows far greater AI tool usage than IT departments are aware of, meaning governance frameworks exist on paper but are not enforced in practice. This matters because unvetted AI tools may exfiltrate sensitive data, violate compliance obligations, or introduce vulnerabilities that security teams cannot see or manage.
What helps against this
How we list vendors
- Cyber asset inventory
You cannot patch, monitor or protect the devices, cloud resources and accounts you do not know you have.
- SaaS security posture management (SSPM)
Business apps like Microsoft 365 and Salesforce stop leaking through risky settings and connected apps.
- AI application security
Prompt injection, data leaks through AI tools and unapproved AI use get caught.