Mergers & Acquisitions partner Sachin Kohli and Data, Privacy, and Cybersecurity partner Demian Ahn recently contributed to the Q4 edition of the General Counsel (GC) Risk Index report published by Diligent Institute. This report explores how legal leaders assess the current risk environment, what risks are driving those assessments, how AI governance is structured, how boards are preparing to oversee AI, and whether organizations are ready to respond to cyber events and related disclosure obligations.

“As risks like AI and cybersecurity evolve at breakneck speed, boards need a clear understanding of their potential legal, regulatory, and disclosure implications, and how management is responding,” said Sachin. “Legal leaders have a critical role to play in connecting these risks across the enterprise, working alongside Risk, Compliance, and Security to translate complex challenges into actionable insights. This means giving boards the visibility to anticipate emerging risks and prioritize oversight."

Approximately 200 general counsels, chief legal officers, and other legal leaders responded to a global survey, which was conducted online from late July to late September 2026. Key findings include:

• AI use is faster than oversight: Nearly 60 percent of legal leaders say AI governance is struggling to keep pace with adoption, highlighting the challenge of establishing effective oversight without slowing innovation.

• Risk remains elevated, with regulation, AI, and cyber leading: 59 percent of respondents rate their organizational risk as high; regulatory change tops the risk list at 55 percent, followed by AI-related risk at 49 percent and cyber threats at 47 percent.

• AI governance is distributed, but accountability can be unclear: Only 23 percent regularly brief the board or senior leadership on AI-related risks, while governance is most often housed with IT, security, or a data/digital function.

Click here to read the Q4 GC Risk Index report.