Financial Advisory Firms Struggle With AI Governance

Most firms lack centralized oversight, leaving them exposed to regulatory scrutiny as the SEC prioritizes AI security.

Updated on Oct. 26, 2026 in Artificial Intelligence

Financial Advisory Firms Struggle With AI Governance

Live Poll

Do you trust your financial advisor to keep your personal data secure against emerging AI threats?

As of October 2026, financial advisory firms face significant operational gaps as they struggle to implement formal governance for artificial intelligence tools. While 85% of firms now identify AI as their primary compliance concern, many still rely on ad hoc usage that leaves them vulnerable to shadow AI and regulatory scrutiny.

Why it matters

The lack of centralized oversight threatens to expose retail banks and wealth managers to rising cybersecurity risks as malicious AI-enabled financial crimes evolve. Firms that fail to shift from tactical usage to strategic enterprise governance risk both regulatory enforcement from the SEC and operational immaturity.

Firms with centralized or hybrid governance models demonstrate AI maturity scores 2.5 times higher than those without. Currently, only 59% of firms utilize formal AI governance committees, while 86% maintain an inventory of approved tools.

The players

Cerulli Associates

A research and consulting firm specializing in asset management and distribution benchmarking.

Securities and Exchange Commission

The federal agency tasked with regulating financial markets and enforcing security controls.

Fitch Ratings

A global credit rating agency that analyzes disruption risks across the wealth management and banking sectors.

ACA Group

A governance, risk, and compliance advisory firm serving financial services institutions.

Investment Adviser Association

A trade association representing the interests of SEC-registered investment advisory firms.

The details

Advisory firms often delegate AI oversight to chief compliance officers rather than chief technology officers, which limits technical integration. This misalignment encourages shadow AI—software used by employees without official IT sign-off—bypassing security protocols. Leading firms, by contrast, assign AI ownership to the chief technology officer in 75% of cases to ensure tools align with broader enterprise security.

2025: AI was identified as a top compliance concern by a smaller share of firms.
July 2026: The Investment Management Compliance Testing Survey was published.
September 2026: Cerulli Associates conducted an RIA benchmark study.
2026: The SEC designated AI security and training as a formal examination priority.

The Tech Race

The 2026 SEC AI examination priorities established a strict baseline for scrutiny that firms are currently struggling to meet. This development follows a pattern of industry reaction where tactical adoption initially outpaced the strategic oversight now required by regulators.

Advisory firm employees should expect immediate changes to software procurement workflows as firms standardize on approved tool inventories. Firms currently relying on department-level AI adoption will face pressure to consolidate these tools under centralized IT oversight.

The takeaway

Financial firms must pivot from departmental experimentation to enterprise-level governance to stay ahead of impending SEC enforcement. Stakeholders should track upcoming SEC enforcement actions, which are expected to materialize before formal rules are finalized.