New research reveals a significant gap between AI deployment and oversight, as confidence lags and visibility into AI agents remains limited
Commvault (NASDAQ: CVLT), a leader in unified resilience at enterprise scale, today released new research highlighting that many organisations across Australia and New Zealand (ANZ) are rapidly embedding AI into critical business operations, often without adequate safeguards in place to manage risks introduced by AI agents and AI-driven applications. This was one of the key findings from Commvault’s State of Data Resilience – Australia and New Zealand, 6th Edition (2026).
Organisations across ANZ are placing significant bets on AI. Many are accelerating investments, with 36% increasing spend by more than 25% in 2026 compared to last year. More than 30% are already trialing or deploying agentic AI across hybrid and multi cloud environments, adding new layers of complexity to how data, systems, and AI agents are managed at scale.
The findings also show that data estates are growing at 30% compared to 2025, largely due to AI deployment and adoption. As data volumes grow and environments become more fragmented, maintaining consistent governance and oversight is becoming significantly more difficult.
In response, organisations are moving to formalize governance, with sixty-six percent of respondents now have policies for AI-generated data and content, up from 29% last year, signalling a rapid shift toward stronger risk and compliance frameworks. However, AI adoption is outpacing process alignment, leaving many organisations without the safeguards and due diligence needed to enforce these policies in practice.
The data exposes critical gaps in these controls:
- Fifty-eight percent of respondents lack high confidence when AI systems are compromised or operating outside defined guardrails
- Only one third of organisations have rigorously assessed security and governance risks before AI deployment
- Just 36% have extended resilience planning to AI agents, leaving most agentic environments exposed
“AI is now central to how organisations operate but its value depends on the integrity of data behind it,” said Martin Creighan, Vice President, APAC at Commvault. “That data must be understood, validated, and free of sensitive information. Without strong governance and resilience across the AI lifecycle, organisations risk losing confidence in the business-critical outcomes AI delivers.”
Cyber Resilience Imbalance: Prioritising AI Outcomes Over Readiness
According to the findings, organisations are focusing on understanding AI-driven decisions, instead of investing in the systems that sustain cyber resilience. Explainability and transparency of AI models ranked highest at 22%. In contrast, foundational resilience enablers, like integration (14%), incident response automation (12%), and scalability (8%) lag significantly.
Managing AI at scale requires a lifecycle approach to resilience, one that starts with safely activating data for AI purposes to support regulatory requirements and extends through discovery, governance, protection and recovery.
“Agentic environments are inherently dynamic, with AI continuously interacting across data, identities, and infrastructure,” said Gareth Russell, Field CTO, Security, APAC at Commvault. “Today, recovery isn’t just about restoring data, but bringing systems, configurations and dependencies back to a known good state. That level of control is critical to operating AI at scale.”
About Research Methodology
TRA (now part of Omdia) conducted an independent quantitative market survey of 411 organisations across ANZ with respondents including CIO/ CISO, IT leader, IT decision maker and direct reports.
About Commvault
Commvault (NASDAQ: CVLT) is a leader in unified resilience at enterprise scale. In a constantly evolving threat landscape, Commvault keeps customers ready by unifying data security, identity resilience, and cyber recovery, on one cloud-native, AI-enabled platform. Customers trust Commvault to conduct the fastest, most complete recoveries – not just their data, but their entire business. Purpose-built for the agentic enterprise, Commvault also enables organizations to safely embrace AI while protecting against AI-driven threats.
