of generative-AI hosts used Kubernetes for inference
CNCF found Kubernetes managing some or all inference workloads for two-thirds of this group.
CNCF Annual Cloud Native Survey · 2026 ↗Updated 2026-10-04 · AI infrastructure
AI security
maturity and governance statistics.
A source-first view of control coverage, exception discipline and the freshness of operating evidence. Published findings provide context; the measurement framework shows what to calculate inside your own environment.
01 / Published evidence
What the public data says.
Each figure links directly to the organization that published it. Vendor telemetry and community surveys are labelled rather than blended into one invented industry average.
malicious breaches were AI-enabled
IBM reported a 56% year-over-year increase in AI-enabled malicious breaches.
IBM 2026 Cost of a Data Breach · 2026 ↗average cost of an AI-enabled breach
IBM found AI-enabled breaches cost roughly $1 million more than the reported global average.
IBM 2026 Cost of a Data Breach · 2026 ↗02 / Your baseline
Measure the system you actually run.
Use these formulas consistently for at least one complete operating cycle. Keep scope, exclusions and collection dates beside the result.
Automated control coverage
Automated controls ÷ applicable controls × 100
Median exception age
Median days an approved exception remains open
Evidence freshness
Evidence items inside their refresh window ÷ all required items × 100
03 / Interpretation
A number without a denominator is decoration.
Segment results by environment, workload owner and business criticality. A falling average can hide one critical service getting worse; a rising count can simply reflect better discovery.
- Record the source system and collection window.
- Separate discovered, in-scope and actively managed populations.
- Keep medians and tail values where averages hide risk.
- Annotate architecture, policy and tooling changes.
- Recalculate after remediation instead of closing on intent.
Related benchmarks
Look at the adjacent signal.
Want these numbers from your cloud?
Gritt can map the data sources, calculate a defensible baseline and implement the changes behind it.
Build the baseline →