Centralized AI governance scores 2.5x higher on AI maturity

RIAs with centralized or hybrid AI governance scored more than 2.5 times higher on average than firms with decentralized or undefined approaches, according to a September 2026 Cerulli Associates study of 68 RIA firms. Governance structure, not assets under management or technology spending, was the strongest predictor of AI maturity, the study found. Chief technology officers owned AI at 75% of leading firms.

Advisory firms are racing to deploy artificial intelligence without the governance structures needed to keep client data and firm operations safe, InvestmentNews reported. Michael Brice, founder and president of BW Cyber Services in White Plains, New York, told InvestmentNews that an IT manager, director or technology vice president is not the same as a formal CTO with the authority and experience to lead AI strategy across the enterprise.

For advisors, the due-diligence question is whether the firm has an enterprise owner for AI and a current policy defining oversight and security controls in detail. Brice said many firms still rely on "check the box" AI policies written two or more years ago, while forward-leaning firms have newer policies that spell out governance and security controls at granular detail. Smaller firms without C-suite technology leadership often place AI governance under the chief compliance officer, an arrangement Brice called inadequate for the challenge.