Gartner has spent two decades telling boards how to think about technology investment. On 19 October 2026, at its own IT Symposium/Xpo in Orlando, Gartner turned that measuring stick on itself and on AI, and the number it produced was 13%. That is the share of CIOs who say their enterprise has realised significant or transformational value from AI, according to Gartner’s 2027 CIO and Technology Executive Agenda survey of 2,002 CIOs and technology executives, fielded between May and July 2026.
Plenty of technology leaders already suspected AI’s return on investment was softer than the vendor decks claimed, so the 13% itself will surprise few of them. The real discomfort sits in what Gartner paired it with in the same week: a separate release titled “AI Risk is Rising Faster Than AI Value,” delivered as the opening keynote by Distinguished Analysts Daryl Plummer and Kristin Moyer. Gartner’s own research describes a gap between value and risk that is widening, on Gartner’s own watch.
The gap Gartner’s own numbers can’t explain away
Two figures explain the gap. Across Gartner’s research this year, 71% of organisations expect to deploy agentic AI within twelve months, yet only 21% have governance capabilities for it. In a separate Q3 2026 survey of 303 CIOs and IT risk leaders, only 25% said they actively align technology risk with business risk. Enterprises are building the engine faster than the brakes.
A widely cited number from Gartner’s research this year puts the risk-value gap even more starkly: 86% of CIOs believe AI risk is growing faster than AI value inside their own organisation. That statistic has circulated across several of Gartner’s 2026 Symposium events, from an earlier stop in Australia through to Orlando, and it measures something different from the 13% figure. The 13% is about value already realised. The 86% is about perceived trajectory. An organisation can report both honestly: little value banked so far, and risk accelerating ahead of whatever value eventually lands.
What Gartner’s own fix looks like
Plummer and Moyer’s answer took the shape of a governance structure they called an AI Central Bank, a function that holds value and risk accountable together, instead of letting a value team chase upside while a risk team chases the consequences separately. Moyer described it plainly: organisations can establish an AI Central Bank “to ensure transparency, coordination and accountability.” Plummer was equally direct about its limits: “What it will not do is eliminate risk, and it will not drive value,” he said. “The only thing that can do that, is people.” The central bank is scaffolding, making decisions visible and consistent across the enterprise. It does not make the decisions for anyone.
The vanguards did the unglamorous work first
That distinction matters more than the keynote language suggests, because the CIOs Gartner classifies as “vanguards” are the ones who built the unglamorous disciplines first, rather than the ones with the biggest AI budgets. Only 31% of surveyed CIOs have explicit criteria for killing an AI pilot before it reaches production, but those who do are 2.3 times more likely to be vanguards. Only 4% have plans to redesign roles for a mixed human-agent workforce, yet that group is 2.4 times more likely to report real value. Stopping criteria, cost accountability, workforce redesign: the pattern holds across every discipline Gartner measured. Governance is not what slows AI down. It is what lets the 13% become 20%.
What this looks like from the steering committee
None of this is abstract for anyone who has sat in a steering committee that approved an AI pilot without ever agreeing what success, or failure, would look like. The projects that die quietly in production are rarely killed by bad models. They are killed by the absence of a rule that says when to stop, and nobody in the room wanted to be the one who wrote it.
Meta and Tesla report third-quarter earnings the same week, and both face the same question from analysts that Gartner just put to CIOs directly: where is the AI value, and who is accountable for the risk beside it. Gartner’s own CIOs do not yet have a confident answer. Building the discipline to produce one is the job now.