Using AI is easy. Profiting from it is not.
In 2026 the question is no longer whether a company uses AI. It is whether AI shows up in the numbers the board reads.
In McKinsey’s latest global survey, 80% of respondents say AI has improved their personal productivity. Yet only 37% report that AI contributes anything to their organisation’s EBIT — essentially unchanged from a year earlier — and just 6% qualify as “AI high performers”, attributing at least 5% of EBIT to it.1
The other large studies land in the same place. IBM’s survey of 2,000 CEOs found that only 25% of AI initiatives had delivered their expected ROI, and only 16% had scaled across the enterprise.6 S&P Global Market Intelligence found that 42% of companies abandoned most of their AI initiatives in 2025, up from 17% the year before.7
From evaluation to production
Of every 100 organisations, 60 looked at enterprise-grade AI systems. Five got one into production.
MIT’s researchers put the cause plainly: the divide does not seem to be driven by model quality or regulation, but by approach.5 Which problem you pick, how you change the work around it, how you connect it, govern it and teach people to use it. That is the opening for an AI consultancy — and the test it has to pass.
The gap is closing — for some.
The companies pulling ahead share a handful of habits. Each benefit below is one of those habits, and what a good consultancy brings when an organisation can’t yet build it alone.
Start with the right problem.
The most valuable thing a consultancy does in week one is often to say no.
Budgets follow what is visible, not what pays. MIT found that around half of generative-AI budgets flow to sales and marketing, while some of the most dramatic, fastest-payback savings came from the back office: replacing outsourced processing, cutting external agency spend, automating risk checks.5
The market makes choosing harder. Gartner estimates that only about 130 of the thousands of vendors selling “agentic AI” offer genuine agentic capability — the rest is “agent washing” of chatbots and RPA — and warns that many use cases sold as agentic don’t need agents at all.8 BCG’s 2026 leaders, by contrast, start from strategic clarity about where AI creates value.2
Prioritising the backlog
Rank every candidate by value and by effort and risk — before anyone writes a line of code.
What a consultancy brings
An outside team maps real processes with the people who run them, then ranks opportunities by value, risk and effort — independent of any one vendor’s product. You get a short, ranked backlog and an honest go / no-go, not a long list of pilots chasing whatever demoed best.
Redesign the work, not just the tools.
This is the clearest difference between the companies that profit from AI and everyone else.
Nearly three-quarters of McKinsey’s high performers have fundamentally redesigned workflows because of AI, up from 55% a year earlier. Among all other respondents, it is one in four.1 Deloitte finds 60% of companies have redesigned jobs around AI to at least a moderate degree — but only 25% say they are using AI to deeply transform the business.4
BCG’s rule of thumb for AI leaders puts the technology in its place: 10% of the effort on algorithms, 20% on data and technology, 70% on people, processes and culture.3
Where the effort goes
The model is the smallest part of the job.
What a consultancy brings
Dropping a model into an unchanged process gets you a faster version of the old process. A consultancy redesigns the process around what the agent does well — who reviews what, where exceptions go, which steps disappear — and writes the new operating procedure with the team that will run it.
Get to production, not pilot purgatory.
Experience is mostly a list of mistakes you no longer make.
In MIT NANDA’s interviews, AI delivered through external partnerships reached deployment about 67% of the time, against about 33% for tools built entirely in-house.5 Internal builds were far more common — and far less likely to ship.
Share of initiatives that reached deployment
Partnered AI shipped about twice as often.
What a consultancy brings
A team that has seen the failure modes: the pilot that only worked on clean demo data, the agent no one was allowed to connect to the ERP, the security review that started in week ten. It designs for production on day one — evaluation on your real historical cases, release gates, monitoring and a named owner — so the pilot is the first release, not a dead end.
Make your data and systems ready.
An agent is only as useful as what it can read and what it is allowed to change.
In a Gartner survey, 63% of organisations either didn’t have, or weren’t sure they had, the right data-management practices for AI. Gartner predicts that through 2026, organisations will abandon 60% of AI projects unsupported by AI-ready data.9 And half of the CEOs in IBM’s study say rapid investment has left them with disconnected, piecemeal technology.6
What “ready” looks like
The unglamorous plumbing that decides whether an agent ships.
What a consultancy brings
Before anything is built, it audits where the data actually lives, how clean it is and which systems an agent must read from and write to — including the old ones without an API. The fix is often less glamorous than the model: data contracts, access scopes, tested connectors and an audit trail.
Build governance in from day one.
Autonomy is arriving faster than the controls that make it safe.
In BCG’s 2026 index, 42% of companies expect to give AI agents genuine decision-making authority by 2030 — but only 5% have the full set of controls in place today.2 Gartner predicts that by 2027, 40% of enterprises will demote or decommission autonomous agents because of governance gaps found only after production incidents. Its diagnosis: one rule for every agent fails both ways — over-restricting simple agents drives shadow development; under-restricting autonomous ones creates risk.10
Ungoverned use is already expensive. In IBM’s 2025 breach study, one in five organisations reported a breach involving “shadow AI”, and high levels of it added about US$670,000 to the average cost of a breach.12
Governance proportional to autonomy
Four levels of autonomy. Each earns its own controls.
The agent acts once a person approves — or alone, below a threshold you set.
- The agent may
- Post, pay or update records once approved; act alone under a value or risk threshold.
- Controls
- Thresholds and approval routes enforced outside the model; evaluation before every release; a record of each decision.
- Who signs off
- A named approver per threshold, with the agent’s evidence in front of them.
- Example
- Paying supplier invoices that match the PO and receipt, under an agreed amount.
In Hong Kong
The rules are mostly guidance built on existing law: the Privacy Commissioner’s Model Personal Data Protection Framework for AI (2024)15 and the Digital Policy Office’s Generative AI Technical and Application Guideline (2025),16 both resting on statutes such as the Personal Data (Privacy) Ordinance. Voluntary does not mean optional for a regulated business — it is what boards and auditors will measure you against.
What a consultancy brings
Governance set in proportion to autonomy — light controls for an agent that suggests, approvals and thresholds for one that acts — enforced outside the model and written to an audit trail your regulator can read. Built in from the first workflow, not bolted on after the first incident.
Leave your people stronger.
Hong Kong’s workforce is already ahead of its training.
72.7% of professionals surveyed by HKUST use AI at work daily or weekly — yet nearly 60% have never received any AI training.13 IBM’s CEOs expect 31% of their workforce to need retraining or reskilling within three years.6
The upside is large when training lands. In a study of 5,179 customer-support agents, an AI assistant raised issues resolved per hour by 14% on average, and by 34% for novice and lower-skilled agents.14 In a randomised experiment with 758 BCG consultants, those using AI on tasks within its capabilities completed 12.2% more tasks, 25.1% faster, at more than 40% higher quality — but on a task outside that “jagged frontier” they were 19 percentage points less likely to get it right.17
Skills: the quiet bottleneck
Use is high. Training is not. And knowing where AI fails is a skill too.
What a consultancy brings
Knowing where the frontier lies doesn’t arrive with a software licence. A good consultancy trains executives, operators and risk teams on your own platform and data, and hands over the runbooks — so the capability stays when the consultants leave.
When consultancy makes things worse.
Not every outside partner closes the gap. Some widen it.
Gartner predicts that by 2028, 70% of enterprises will abandon agentic AI built by vendors’ forward-deployed engineers — bespoke systems that grow expensive to maintain and that no one inside can change once the vendor’s engineers leave. It also warns of “FDE washing”: consulting rebranded as engineering.11 And MIT noted that some of the clearest AI savings came from cutting spend on external agencies and consultants.5
The bar is rightly high. A consultancy is worth its fee when it leaves you owning the system and able to run it. It is a liability when it leaves you dependent.
Leaves you dependent
- Code, prompts and evaluations live in the vendor’s account
- Success is measured in demos and pilot counts
- One governance rule for every agent
- Knowledge leaves with the team
- Always recommends more AI
Leaves you capable
- Deployed in your cloud; you own the code, prompts and evaluation data
- Measured in hours returned, cycle time, accuracy and exceptions
- Controls set by each agent’s level of autonomy
- Runbooks, training and a named internal owner
- Tells you where not to use AI
Seven questions to ask before you hire anyone.
Ask every firm on your shortlist — including us. Tick the ones they answered clearly, with evidence.
Shortlist check
Nothing is saved or sent. It only works out a score on this page.
What a good start looks like.
Start with one workflow and scale on evidence. This is how IIVPA runs a first engagement; timings vary with the process and the systems involved.
The four numbers we report from the first week.
Common questions.
What does an AI consultancy actually do?
Isn’t it cheaper to build in-house?
How long before we see value?
We already use ChatGPT or Copilot. Do we still need this?
How does this work with Hong Kong regulation?
Bring one process. Leave with an honest answer.
A free 90-minute working session with an IIVPA partner and an engineer. You bring one process; we tell you what agents can — and can’t — do with it.
Sources and notes.
- 1McKinsey & Company, “The state of AI in 2026: On the road to ROI”, August 2026. Online survey of 1,719 participants, 4 May – 8 June 2026. mckinsey.com
- 2Boston Consulting Group, “AI Is Starting to Pay Off. Almost 50% of Companies Now Generate Value with It.” (Applied AI Index 2026), press release, 30 September 2026. 1,330 senior leaders. bcg.com
- 3Boston Consulting Group, “Are You Generating Value from AI? The Widening Gap”, September 2025 (10-20-70 principle; 5% of companies “future-built” for AI). bcg.com
- 4Deloitte, “Enterprise AI Enters an ROI Reckoning: More Use, Uneven Value”, press release on State of AI in the Enterprise, 29 October 2026. 3,500 leaders in 25 countries, May–June 2026. deloitte.com
- 5MIT NANDA, The GenAI Divide: State of AI in Business 2025, July 2025. Review of 300+ public AI initiatives, interviews with 52 organisations, survey of 153 senior leaders, January–June 2025. Preliminary findings; self-reported. report (PDF)
- 6IBM Institute for Business Value, 2025 CEO Study, 6 May 2025. 2,000 CEOs in 33 countries and 24 industries, February–April 2025. newsroom.ibm.com
- 7S&P Global Market Intelligence survey of 1,000+ respondents in North America and Europe, as reported by CIO Dive, 14 March 2025. ciodive.com
- 8Gartner, “Gartner Predicts Over 40% of Agentic AI Projects Will Be Canceled by End of 2027”, press release, 25 June 2025. gartner.com
- 9Gartner, “Lack of AI-Ready Data Puts AI Projects at Risk”, press release, 26 February 2025. gartner.com
- 10Gartner, “Gartner Says Applying Uniform Governance Across AI Agents Will Lead to Enterprise AI Agent Failure”, press release, 26 May 2026. gartner.com
- 11Gartner, “Gartner Predicts 70% of Enterprises Will Abandon Agentic AI Built by Vendor Forward-Deployed Engineering by 2028”, press release, 29 September 2026. gartner.com
- 12IBM and Ponemon Institute, Cost of a Data Breach Report 2025, July 2025. ibm.com
- 13HKUST Business School, “HKUST Workplace AI Study Reveals Hong Kong Leads the World in Adoption Rate with Over 70% of Employees Using AI at Work”, 10 August 2026. 3,722 valid responses, March–April 2026. bm.hkust.edu.hk
- 14Erik Brynjolfsson, Danielle Li and Lindsey Raymond, “Generative AI at Work”, Quarterly Journal of Economics 140(2), 2025. NBER Working Paper 31161. nber.org
- 15Office of the Privacy Commissioner for Personal Data, Hong Kong, Artificial Intelligence: Model Personal Data Protection Framework, June 2024. pcpd.org.hk (PDF)
- 16Digital Policy Office, HKSAR Government, “Digital Policy Office releases Hong Kong Generative Artificial Intelligence Technical and Application Guideline”, 15 April 2025. info.gov.hk
- 17Fabrizio Dell’Acqua, Edward McFowland III, Ethan Mollick, Hila Lifshitz-Assaf, Katherine Kellogg, Saran Rajendran, Lisa Krayer, François Candelon and Karim Lakhani, “Navigating the Jagged Technological Frontier: Field Experimental Evidence of the Effects of AI on Knowledge Worker Productivity and Quality”, Harvard Business School Working Paper 24-013, 2023. ssrn.com
Figures are quoted as each source published them; most come from self-reported surveys, and surveys differ in who they ask and how they define value, so they are not directly comparable. Where a study shows an association, we say so rather than claim cause. Sources checked on 6 November 2026.