Insurers Report AI Benefits but Lax Governance

Grant Thornton's "Insurance insights: 2026 AI Impact Survey" reports that 52% of insurance respondents say AI has driven revenue growth and 62% say AI maturity is scaling across functions, while only 24% are "very confident" they could pass an independent AI governance review within 90 days (Grant Thornton). Insurance Journal reports that 44% of insurance executives attributed AI project failure or underperformance to governance or compliance challenges (Insurance Journal). Complete AI Training summarizes the survey as finding roughly three in four insurance and financial-services leaders lack confidence in passing an independent AI governance audit in 90 days and notes growing regulator attention from the National Association of Insurance Commissioners (Complete AI Training; Insurance Business).

Editorial analysis - technical context: Companies scaling AI commonly confront operational gaps that are not solved by model improvements alone. The survey highlights fragmented evidence of controls across teams and tools, which aligns with known technical needs such as dataset lineage, model registries, reproducible evaluation pipelines, and robust monitoring for data drift and performance. Published survey figures also flag barriers that are technical in nature: 56% of respondents name regulatory or compliance uncertainty as a top barrier and 68% say AI controls exist but are fragmented across teams and tools (Grant Thornton). From a practitioner perspective, those signals point to investment needs in observability, automated testing, and centralized evidence collection for audits.

The gap between board-level enthusiasm and operational proof mirrors patterns seen across regulated sectors. Reporting cites the National Association of Insurance Commissioners' guidance on AI system programs as raising the bar for insurers' governance evidence (Complete AI Training). Insurance-sector commentary in Insurance Journal cites AM Best's Sridhar Manyem warning that poor or fragmented data governance leads to unreliable AI outputs and complicates regulatory compliance (Insurance Journal). Grant Thornton's report frames the risk in economic terms: Insurance Journal reproduces a Grant Thornton line that "Without clear policies and tested controls, insurers are leaving their organizations open to risk with regulators and customers, fueling financial pressure that could ultimately erode product profitability" (Insurance Journal quoting Grant Thornton).

Observers will track a few measurable indicators: the share of firms reporting they could pass an external governance review within 90 days (currently 24% per Grant Thornton), adoption of unified evidence platforms or model registries, and whether boards integrate AI risk into ongoing oversight (Grant Thornton notes only 54% have integrated AI risk into ongoing board/committee oversight). Another signal is the prevalence of tested incident response plans for AI failures; the survey finds only about one in five organizations have tested such plans (Complete AI Training). Finally, regulator actions or examiner guidance from the NAIC and similar bodies will be a leading external pressure that could change insurer behaviour.

Insurance Journal and Complete AI Training reproduce Grant Thornton's survey findings and include comments from Grant Thornton advisors. Complete AI Training also quotes Tom Puthiyamadam of Grant Thornton Advisors on patterns around guardrails: "Guardrails come after an incident occurs - not before - and by then there may be significant organizational and operational consequences" (Complete AI Training). These sourced remarks frame the report's cautionary tone but do not provide firm evidence of individual firms' internal roadmaps.

Editorial analysis: Across regulated industries, scaling AI without consolidated, provable controls tends to increase audit friction and operational risk. Practitioners advising insurers should anticipate requests for consolidated evidence, reproducible validation artifacts, and playbooks for incident response; those are the artifacts regulators and auditors are most likely to demand, according to the coverage of the survey (Grant Thornton; Insurance Journal; Complete AI Training).