Nearly two decades into the cloud era, a striking paradox has emerged at the heart of enterprise digital strategy: organisations have invested heavily in cloud infrastructure, yet the vast majority remain structurally unprepared for the AI-driven demands now being placed upon it. According to NTT DATA’s landmark global study — spanning 2,300+ senior decision-makers across 33 countries — only 14% of organisations have reached the highest level of cloud maturity. At the same time, 99% report that AI is actively increasing their demand for cloud investment, and 88% acknowledge that current cloud investment levels put their AI and modernisation initiatives at risk.

For C-suite executives and board members navigating digital transformation, these figures are not merely a technology concern — they represent a strategic and financial exposure that demands immediate attention.

The Cloud Maturity Gap: A Strategic Risk, Not a Technical One

The persistent gap between cloud ambition and cloud capability is well-documented, but the NTT DATA findings reframe it in consequential terms. Cloud migration, long treated as an infrastructure project delegated to IT departments, has now become a boardroom-level risk factor. When 88% of organisations admit their cloud posture is insufficient to support AI and modernisation goals, the implication is clear: digital strategy built on an immature cloud foundation is a strategy built on sand.

From a European perspective, this challenge is compounded by regulatory complexity. Enterprises operating under DORA (the Digital Operational Resilience Act), which entered into force across EU financial entities in January 2025, face heightened obligations around ICT risk management, third-party cloud dependencies, and operational continuity. A cloud estate that has not reached structural maturity is not only a competitive liability — it is increasingly a compliance liability.

For General Counsel and Chief Risk Officers, the intersection of cloud immaturity and regulatory obligation represents a dual exposure that must be stress-tested at the governance level, not managed reactively at the operational level.

AI as the New Forcing Function for Cloud Investment

The relationship between AI adoption in enterprise and cloud infrastructure has fundamentally shifted. AI is no longer simply a workload running on cloud — it is becoming the primary execution layer through which cloud strategy delivers business value. This reframing has significant implications for how organisations prioritise and govern technology investment.

With 71% of organisations planning to increase AI spending in 2026, the pressure on cloud infrastructure will intensify further. Hybrid and multi-cloud architectures are emerging as the preferred response, offering the flexibility to distribute AI workloads across environments while managing cost and latency. Serverless computing is gaining traction as a cost-optimisation mechanism, allowing organisations to scale AI inference and data processing without proportional infrastructure spend.

For CFOs, this creates a critical budgeting challenge: AI investment without commensurate cloud maturity investment risks delivering negligible returns. The capital allocation question is no longer whether to invest in cloud modernisation, but how to sequence cloud and AI investment to generate compounding value rather than compounding technical debt.

Implications for Business Leaders: From Awareness to Action

The data demands a shift from awareness to structured action. Decision-makers should consider the following priorities:

  • Conduct a cloud maturity audit: Benchmark your organisation against industry frameworks — such as those aligned with the European Cloud Strategy or hyperscaler maturity models — to identify structural gaps before committing further AI investment.
  • Align cloud and AI governance: Establish a joint steering function that connects cloud architecture decisions with AI programme objectives, ensuring infrastructure roadmaps are driven by business outcomes rather than technical preferences.
  • Assess regulatory exposure: For EU-regulated entities, map cloud dependencies against DORA requirements and the forthcoming obligations under the EU AI Act, which introduces risk-tiered obligations for AI systems deployed in high-stakes domains.
  • Rethink the build-buy-partner calculus: Given the pace of innovation management required, many organisations will find that strategic partnerships with cloud-native and AI-specialist providers offer faster maturity acceleration than internal build programmes.
  • Embed cloud KPIs into board reporting: Cloud maturity should be a standing agenda item at board level, reported alongside financial and operational metrics, not buried in quarterly IT reviews.

Key Takeaway

The NTT DATA findings confirm what many senior leaders have sensed but few have acted upon with sufficient urgency: cloud maturity is the critical enabler — and the critical bottleneck — of enterprise AI strategy. Organisations that treat cloud modernisation as a legacy infrastructure exercise will find themselves structurally unable to compete in an AI-native economy. Those that recognise cloud as a strategic asset — governed at board level, aligned with regulatory obligations, and sequenced intelligently with AI investment — will be positioned to convert emerging technology into durable competitive advantage.

The window for structured intervention is narrowing. The 14% who have reached cloud maturity are not waiting.