Enterprises are not making progress on AI risk, ceding competitive advantage