S&P 500 Companies Talk About AI. Few Disclose How It's Controlled

Nearly all S&P 500 companies mention AI in their annual reports, but only about 3% disclose specific governance processes managing AI cybersecurity risks. This gap highlights a lack of transparency as new regulations in the US, EU, and Australia increase pressure for documented AI controls.