The AI Governance Gap

Organizations are building AI governance frameworks at record pace — but incidents keep rising. Our Behavioral Sufficiency research found that governance correlates with incident visibility, not prevention (r = 0.36). The problem isn't a lack of governance — it's that governance alone isn't sufficient to change how organizations actually behave.

This map measures the depth of behavioral insufficiency across 65 countries. Each record is scored on five dimensions — governance gaps, accountability absence, culture deficits, norm erosion, and reporting failures. Darker countries show deeper, multi-dimensional failure where governance isn't just inadequate in one way but is failing to constrain behavior across the board. Click any country to see which dimensions drive its score.

3,397 Records Analyzed

AI incidents, audit findings, policy reports, and use cases scored across five behavioral failure dimensions in 65 countries.

80% Have Governance

Governance frameworks exist in the vast majority of cases. The problem isn't a lack of rules.

30% Still Fail

Of cases with governance in place, behavior still wasn't aligned. Rules alone don't change what organizations do.

49% Multi-Dimensional

Nearly half of all failures involve two or more behavioral dimensions — not just one gap but systemic breakdown.

Governance Gap Formal rules exist but are inadequate, poorly designed, or fail to cover the specific use case. The most universal dimension — present in nearly every country.

Accountability Absence No one is held responsible when AI systems cause harm. Responsibility is diffused across vendors, agencies, and algorithms until no one owns the outcome.

Culture Deficit Organizational culture doesn't support responsible AI use. Pressure to ship fast, uncritical deference to AI outputs, or treating oversight as an obstacle.

Norm Erosion Standards degrade through normalization of deviance. Known problems are tolerated as “edge cases” until the degraded standard becomes the standard.

Reporting Failure Incidents go unreported, are underreported, or are only disclosed under external pressure. Without visibility, evidence-based governance is impossible.

Country