Newsroom / Audit and Risk / Press Release

Gartner Survey Finds Risk Leaders Concerned About Low-Growth Economic Environment and AI Risks in Third Quarter of 2025

STAMFORD, Conn., November 6, 2025

Survey of 184 Senior Enterprise Risk Executives Reveals Shifts in Top Five Emerging Risks

The low-growth economic environment, caused by tariff-driven trade tensions and other conditions, moved into the top rank of emerging risks for the third quarter of 2025, according to Gartner, Inc., a business and technology insights company.

The Quarterly Emerging Risk Report series captures the views and concerns of enterprise risk management (ERM) leaders, risk management professionals, auditors, and senior executives views on emerging risks or over-the-horizon risk.

The 3Q25 report, based on a survey of 184 senior risk and assurance executives, also revealed mounting concern around artificial intelligence (AI). AI-related information governance-driven risks, moved up in rank, from the fourth most cited spot in 2Q25 to the second rank in 3Q25, and shadow AI moved from the fifth ranked spot to the third spot, as organizations face challenges in effectively monitoring its use (see Table 1).

“The top five emerging risks in the third quarter highlight a continuum of concern related to two broad themes for enterprises that emerged in the second quarter: A volatile low-growth macroeconomic environment, and AI as the disruptive technology that can increase compliance risks quickly as it is adopted by the mainstream,” said Gamika Takkar, Director, Research, in the Gartner Risk & Audit Practice.

Figure 1: Top Emerging Risks of Q3 2025
[Image Alt Text for SEO]

Source: Gartner (November 2025)

Navigating Complex Emerging Risk Signals

The universe of risks continues to diversify. As emerging risks grow more complex, 72% of ERM leaders say taking timely action is highly important. However, only 15% feel confident in determining what information to spotlight.

“Amid varying emerging risk signals, heads of ERM should prioritize tactics to identify emerging risks that require immediate stakeholder attention for timely response,” said Takkar.

To effectively recognize risks that need immediate attention, risk leaders should take these three steps to fully evaluate the impact and prioritize response: 

  • Set up impact thresholds using diverse parameters. Assess diverse impact parameters, including regulatory, reputational and ESG dimensions to shortlist high-priority emerging risks.
  • Link emerging risks with strategic priorities. Analyze how emerging risks impact strategic priorities to facilitate targeted action steps that prevent must-avoid outcomes (MAOs).
  • Use response time with impact and velocity. Factor in organizational response time along with impact and velocity to prioritize emerging risks.

Enterprise risk leaders can also set impact thresholds using a range of parameters to consider. These include issues like regulatory impact, which may cause issues that lead to regulatory shutdowns or licensing issues and legal impact, which could cause precedent-setting legal action. Reputational and customer impact are also important considerations as they could risk irreversible damage and trust, causing customer attrition.

“Enabling ERM leaders to navigate the noise and identify risks that require timely action is top of mind for any enterprise,” said Takkar. “To make sense of conflicting signals, leaders must be cognizant of risk prioritization tactics and ensure timely stakeholder to avoid strategic derailment.”

Gartner clients can access the study at 3Q25 Emerging Risk Report. Nonclients can read: Top Emerging Risk Trends Report.

About Gartner for Legal, Risk & Compliance Leaders

Media contact



Latest releases

About Gartner

Gartner (NYSE: IT) delivers actionable, objective business and technology insights that drive smarter decisions and stronger performance on an organization’s mission-critical priorities. To learn more, visit gartner.com.