Enterprise AI’s Real Bottleneck Isn’t the Model, It’s the Data: Comparing Lockheed Martin, KPMG and Nationwide’s Governance-First Approach

Key Takeaways

• Lockheed Martin, KPMG and Nationwide Building Society, a defence contractor, a professional services firm and a UK financial mutual, all sequenced their AI programmes the same way: consolidate and govern the underlying data first, then build AI on top of it. That pattern held across three organisations with almost nothing else in common, which is itself worth taking seriously.
• Lockheed Martin’s own published pilot numbers are worth reading precisely rather than as an unqualified success: an early generative AI question-answering system improved from 45.45% response accuracy to 56.8% with prompt engineering and to 66.0% after further query optimisation. Against general, inexact industry benchmarks for enterprise retrieval-augmented Q&A systems, which commonly range from roughly 60% to the mid-80s depending on task and tuning, though no single authoritative figure exists, 66% sits at the lower-to-middle end, a credible, improving, honestly reported result rather than a standout one.
• KPMG’s case study contains no quantified outcome at all, but the underlying confidentiality stakes are real and specific, not generic: professional codes including the ICAEW Code of Ethics impose a standing duty of client confidentiality that survives the end of an engagement, and ICAEW’s own technical guidance requires firms to actively manage conflicts of interest, precisely the risk an AI system with poorly controlled access across many clients’ data could create if access controls aren’t built first.
• Two of the three, Lockheed Martin and Nationwide Building Society, built their governance layer with IBM, whose watsonx.governance platform was independently named a Leader in 2025’s Gartner Magic Quadrant, Forrester Wave and IDC MarketScape for AI governance platforms, a genuine, analyst-confirmed market position distinct from the consumer-facing model providers, OpenAI, Anthropic, Google, that dominate headlines but don’t compete in this specific governance-platform category.
• Context worth holding onto throughout: MIT’s NANDA research group reported in August 2025 that 95% of enterprise generative AI pilots deliver no measurable return on investment, and only 5% reach production. Judged against that backdrop, all three organisations here, imperfect, still-in-progress results included, are already ahead of where most enterprise AI efforts currently stall.

Three organisations with almost nothing in common, a defence and aerospace contractor, a Big Four professional services firm, and a UK building society, arrived at the identical sequencing decision for their AI programmes: govern and consolidate the data first, then build on top of it. That’s a genuinely useful pattern for a UK C-suite to notice, and it’s worth reading each of the three cases precisely, including where the published numbers are modest rather than triumphant, rather than treating every AI case study as either a success story or a cautionary tale.

Lockheed Martin: real numbers, honestly modest

Lockheed Martin, the global aerospace and defence company, had valuable data locked away across 46 disparate systems spanning multiple data lakes, data management, analytics and business intelligence tools, making it difficult to put that data to consistent use across the enterprise. “Data is the foundational element by which we pull everything together across the enterprise,” said Stephan Gerali, Chief Architect and Senior Fellow at Lockheed Martin. Working with IBM, Lockheed Martin replaced those 46 systems with a single, connected and accessible data environment built on IBM watsonx.data, along with watsonx.data integration and intelligence tools. With a unified, scalable data foundation in place, the company built out a broader AI ecosystem, culminating in the Lockheed Martin AI Factory, a secure environment where 10,000 engineers build, iterate on and deploy AI solutions at scale, accelerated by IBM Granite open AI models. Agentic frameworks and virtual agents developed inside the AI Factory, powered by watsonx.governance and watsonx Orchestrate, now help manage complex workflows including handling HR-related inquiries through natural language. “We’re getting closer each day to a data-driven culture where folks can take the data they have and immediately make use of it,” Gerali said.

The specific figure worth reading carefully: in an early generative AI question-answering pilot, response accuracy rose from 45.45% to 56.8% with prompt engineering, and to 66.0% after query optimisation. That’s a real, transparently reported improvement, and it’s worth being honest about where 66% actually sits. Enterprise retrieval-augmented Q&A systems commonly report accuracy figures ranging from roughly 60% up into the mid-80s depending on the task and how heavily the system has been tuned; there’s no single authoritative industry-wide benchmark, figures vary hugely by domain and evaluation method, but against that general spread, 66% reads as a credible, still-improving result at the lower-to-middle end, not a standout one. That’s not a criticism of Lockheed Martin’s disclosure, if anything the opposite: publishing an honest, incrementally improving figure rather than a rounded-up success number is precisely the kind of transparency a defence contractor’s own governance context would predict. The US Department of Defense adopted five formal AI Ethical Principles in February 2020, Responsible, Equitable, Traceable, Reliable and Governable, developed by the Defense Innovation Board, followed by a 2021 implementation plan and specific AI ethics guidance for contractors from the Defense Innovation Unit. That framework applies across a defence contractor’s AI use generally, not only to weapons systems, which is a plausible, if not explicitly stated, part of why Lockheed Martin’s own account of this pilot reads as a careful progress report rather than a marketing claim.

KPMG: no number at all, and a genuinely specific reason the governance mattered first

KPMG, one of the Big Four professional services firms, needed better mechanisms for securing sensitive information across a complex data estate while maintaining regulatory compliance and data governance standards, and wanted its consultants to be able to access valuable insights safely rather than being blocked by fragmented controls. Following a successful pilot, KPMG signed a three-year engagement with Aiimi to deploy its AI-powered Workplace AI platform, helping the firm classify, refine and govern its data landscape. The platform lets teams identify, secure and intelligently classify data while respecting retention rules, access controls and client obligations. “To have trust in AI outputs you must first have trust in your underlying data. The Aiimi platform gives us that trust,” said Chris Allen, Chief Data Officer at KPMG UK. The three-year engagement gives KPMG a structured foundation for governing its data estate as it scales its data and AI ambitions across the firm.

Unlike Lockheed Martin, KPMG’s case study contains no quantified outcome whatsoever, no accuracy figure, no time saving, no cost reduction. That’s worth naming plainly rather than filling in with assumption. What’s genuinely worth understanding, though, is why the governance-first sequencing wasn’t optional for a firm like KPMG in a way that goes beyond generic caution. Professional codes governing accountancy and professional services firms, including the ICAEW Code of Ethics, impose a standing duty of client confidentiality that survives the end of a specific engagement, and ICAEW’s own technical guidance specifically requires firms to identify and actively manage conflicts of interest. For a firm serving competing clients simultaneously, an AI system with poorly controlled access isn’t a hypothetical risk, it’s precisely the mechanism through which one client’s confidential information could inadvertently inform work product delivered to a competitor. That’s a real, citable, professional-standards basis for KPMG’s approach, not just sound general practice, and it’s a more specific reason to build access controls before scaling AI than the case study itself spells out.

Nationwide: the third data point in the same pattern

Nationwide Building Society took the same sequencing approach at a third kind of institution again, a UK financial mutual rather than a defence contractor or a professional services firm, building an AI Centre of Expertise with IBM Consulting and Microsoft Azure OpenAI Service before scaling deployment, a case study this publication has examined in detail elsewhere, including the real, separately-reported improvement in customer letter response times that emerged after the original case study’s governance-first framing, alongside Nationwide’s own acknowledgement, reported separately, that broader return on investment across its wider AI rollout remains difficult to quantify. The relevant point for this comparison is narrower: Nationwide is the third organisation in this set to build the governance layer before the measured result, reinforcing rather than complicating the pattern visible at Lockheed Martin and KPMG.

The vendor pattern worth naming plainly

Two of these three organisations, Lockheed Martin and Nationwide Building Society, built their governance layer specifically with IBM, either directly through watsonx.governance or via IBM Consulting. That’s not incidental: IBM’s watsonx.governance platform was independently named a Leader in Gartner’s first AI Governance Platforms Magic Quadrant, The Forrester Wave for AI Governance Solutions, and the IDC MarketScape for Unified AI Governance Platforms, all in 2025, a genuine, three-firm analyst consensus specifically in the enterprise AI governance category, distinct from the consumer-facing model providers, OpenAI, Anthropic, Google, that dominate general AI coverage but don’t compete in this particular governance-platform space at all. KPMG’s approach with Aiimi sits outside that specific IBM pattern, a reminder that “governance-first” is a genuine cross-industry principle, not proof that every large enterprise is converging on identical vendor infrastructure to get there.

What a UK C-suite should actually take from all three

The most useful context for reading any of these three case studies is one none of them state directly: MIT’s NANDA research group reported in August 2025 that 95% of enterprise generative AI pilots deliver no measurable return on investment, and only 5% ever reach production. Against that backdrop, Lockheed Martin’s honestly modest 66% accuracy figure, KPMG’s unquantified but professionally well-justified governance build, and Nationwide’s governance-first sequencing followed by a real, if partial, measured result, are not underwhelming stories. They’re evidence of three organisations that got further than the overwhelming majority of enterprises currently attempting the same thing, precisely because each one treated the unglamorous data and governance work as the actual project, rather than a delay before the real one began. For a board weighing its own AI investment, the specific lesson isn’t which vendor to pick or which sector to imitate. It’s that the sequencing itself, data and governance before scale, appears to be the genuine differentiator, and that a case study reporting a modest, improving number is, on the evidence here, a better sign than one reporting no number and claiming full success.