NAVEX has published its 2026 State of Risk & Compliance Report, based on a global survey of nearly 1,200 risk and compliance professionals. According to the report, compliance functions are becoming increasingly embedded in corporate strategy, while also identifying persistent challenges relating to leadership, organisational culture and resource allocation.

According to the report, organisations with larger compliance teams and higher compliance budgets consistently rate their compliance programmes as more mature and effective, suggesting a strong correlation between programme maturity and investment. At the same time, the survey reveals a notable disconnect between leadership rhetoric and practice. Although senior executives widely acknowledge compliance as a strategic business asset, almost half of respondents report that compliance is still perceived as a “necessary evil” that may hinder commercial objectives.

The report also highlights the rapid integration of artificial intelligence into compliance functions. AI is already widely used in areas such as training, investigations, board reporting and third-party risk management, with only a small minority of organisations reporting no AI adoption at all. The reports concludes that AI is increasingly being deployed as a practical governance tool rather than an experimental technology.