Although compliance teams recognize key business risks, many U.S. companies remain unprepared to address them, according to AlixPartners’ 2026 U.S. Risk Survey (Survey). The Survey found that the absence of prescriptive federal rules on AI is exacerbating risks, and that cybersecurity and data privacy rank high among worries. Lisa Osofsky, a partner with the firm who was among the Survey’s authors, spoke to the Cybersecurity Law Report about the Survey results and what lessons companies should take away from the findings. This article distills insights from the Survey along with her comments. See our two-part series on the AI laws in Colorado and Connecticut: “Mapping Scope and Core Provisions” (Jun. 10, 2026), and “Preparing to Comply” (Jun. 17, 2026).