Topic starter
18/08/2026 2:48 pm
TL;DR: McKinsey finds that only 7% of organizations have successfully scaled AI across the enterprise, reinforcing that trusted, governed, AI-ready data matters more than model choice or infrastructure, according to Sentra. The governance shift is now about visibility, metadata, access context, and continuous control across the data AI can retrieve and transform.
Editorial analysis by NHI Mgmt Group, based on content published by Sentra: “McKinsey's Latest AI Report Reveals the Real Barrier to Enterprise AI: Data”.
By the numbers:
- Only 7% of organisations have successfully scaled AI across the enterprise, according to McKinsey research cited by Sentra.
Key questions
Q: How should security teams govern personal data used by AI agents?
A: Security teams should govern agent access as a runtime control problem, not as a one-time permission decision.
Q: Why does poor metadata create risk for AI systems even when the model is strong?
A: Because the model only reasons over what retrieval gives it.
Q: What breaks when organisations rely on quarterly access reviews?
A: Quarterly reviews break the link between policy and reality.
Practitioner guidance
- Implement continuous data discovery Map where sensitive data lives across cloud, SaaS, on-premises, and AI data stores so AI access decisions are based on current inventory rather than assumptions.
- Attach metadata to AI-accessible data Enforce classification, ownership, lineage, and sensitivity labels so AI systems can distinguish public content from regulated or highly sensitive material.
- Right-size access before AI expansion Review who and what can reach high-value datasets, including copilots and agents, and remove overexposed entitlements that would otherwise scale with AI usage.
Bottom line: AI fails at enterprise scale when the data it reaches is not discoverable, classified, and governed in a way the model can trust.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
18/08/2026 3:30 pm
AI data readiness is becoming an identity governance problem as much as a data governance problem. The article makes clear that AI value depends on who and what can reach enterprise data, not just where the data sits. Once copilots and agents enter the picture, access scope, ownership, and lifecycle context become part of AI trust. Practitioners should treat AI data readiness as a shared IAM and data governance discipline, not a storage hygiene exercise.
A few things that frame the scale:
- Enterprise AI use rose from 55% of organisations in 2023 to 88% in 2025, according to McKinsey’s Global Surveys on the State of AI.
A question worth separating out:
Q: What should data and security teams align on before scaling AI?
A: They should align on one operating model for discovery, classification, access, lineage, and remediation. AI readiness fails when security owns permissions but data teams own structure and quality in separate workflows. Shared governance is what turns enterprise data into something AI can use safely and consistently.
👉 Read our full editorial: AI data readiness is the real barrier to enterprise-scale AI