AI Governance: 83% Use GenAI, Only 31% Have a Policy

Would you let your employees trade derivatives without a risk policy? Then why AI?

An ISACA inquiry in the European region has disclosed that generative AI usage is acknowledged by 83% of the professionals in their companies, whereas only 31% of them possess a formal and comprehensive AI policy [1].

The situation is that the worries regarding misuse and deepfakes are very high, whereas the spending on countermeasures is still very low. When it comes to cloud and AI maturity, the Netherlands is at the top of the list with strong positions, and the Dutch firms are above the average line in terms of responsible AI design and deployment [2].

However, the EU regulation (the AI Act) and the Dutch societal expectation have made it impossible to put “implicit trust” any longer. Research concludes that AI governance and organizational readiness are the most important factors, along with technology, to predict successful and ethical AI adoption. Academic studies even place them above technology [3].

 

For Dutch boards, AI governance is now a fiduciary responsibility, not a side project:

• Fairness, explainability, and accountability are the key principles.
• Guidance pertaining to specific roles: allowable and non-allowable actions for the staff regarding AI.
• Supervision: existing governance covers risks and ethics rather than setting up parallel organizations.

Do you know who, in your organisation, is accountable for AI risk today?

At Centralink, we help boards perform an AI governance health check and translate regulations into pragmatic policies and controls.

Request your AI governance review via info@centralink.nl

 

References:

[1] ISACA. (2025). Survey on generative AI use and governance in European organisations. (Reported in TechRadar, 2025).

[2] PwC Netherlands. (2025). EMEA Cloud Business Survey 2025 – Netherlands highlights.

[3] Palade, M., & Carutasu, G. (2021). Organizational readiness for artificial intelligence adoption. Transactions on Engineering and Management, 7(1–2).