10% of organizations have a formal AI policy in place