AI is gradually becoming a core feature within compliance, but it is within cybersecurity where the technology is seeing the greatest deployment, both in terms of depth and autonomy.

This finding comes from the ‘AI in Risk and Compliance 2026’ report, which was co-authored by RegTech Analyst and Parker & Lawrence Research. The report examines how AI investment is translating into measurable returns, and the governance fap putting the gains at risk.

As part of the study, a survey got the responses of 300 senior compliance decision-makers at financial institutions and 100 technology vendors. This sat alongside detailed interviews with regulators and market experts to get an accurate picture of AI in risk and compliance in 2026.

One of the areas the report delved into is the depth and autonomy of AI’s deployment within risk and compliance. The deployment depth assesses how far AI has progressed from exploration and pilots into multiple production deployments and core operational processes.

On the other side of the graph, autonomy measures the highest level of independent action an AI tool is given, from providing context through to executing within predefined automated controls.

Cybersecurity was the domain that has seen the highest score, both in terms of depth and autonomy. It was closely followed by financial crime compliance and compliance management domains.

Interestingly, the data risk and technology risk domains had relatively similar deployment depth as the top three areas, however it was much less autonomous. As for the final two domains, conduct risk scored low on both deployment depth and autonomy, while ESG remained the least developed domain with the lowest scores.

Source link