Large US companies are deploying agentic AI faster than they can adapt governance, monitoring, and assurance practices.

EY’s survey found that many organizations lack controls for autonomous systems, some bypass internal review processes to accelerate deployment, and others cannot detect unauthorized agents. The findings point to a gap between formal oversight policies and their operational ability to manage agent behavior, model changes, data quality, and harmful incidents.