AI Governance
Oversight your board can actually use
Governance that tells people what to do on Monday, not a document that describes what good would look like.
Everyone agrees AI needs governing. Nobody agrees what that means.
You have probably seen a policy that prohibits things nobody was doing, and permits things nobody understands. Or a framework borrowed from an organisation with a hundred times your resources.
Meanwhile your actual exposure is elsewhere: a tool your team adopted without telling anyone, a vendor who added AI to a product you already own, a decision being made by a model nobody is checking.
What you get
An inventory that reflects reality
What is actually running, including the AI you did not choose. Nothing else works without this.
Clear decision rights
Who approves what, at what level of risk. The single most common gap.
Controls proportionate to risk
Heavier where consequences are real, light where they are not.
A policy people can follow
Short, specific, written for the people who have to apply it.
Monitoring that continues
two or threWhat gets reviewed, how often, by whom, and what triggers escalation.e lines
How it works
Find what is running. Interviews, a short survey, a look at vendor contracts.
Assess exposure. Where could this actually hurt you: privacy, accuracy, bias, contractual obligation, reputation.
Set decision rights. Who says yes, at what threshold.
Write the controls. Proportionate, testable, owned.
Build the review cycle. Governance that stops after implementation is not governance.
Take it to the board. I will present it and answer the hard questions if that helps.
Who it is for
- Find what is running. Interviews, a short survey, a look at vendor contracts.
- Assess exposure. Where could this actually hurt you: privacy, accuracy, bias, contractual obligation, reputation.
- Set decision rights. Who says yes, at what threshold.
- Write the controls. Proportionate, testable, owned.
- Build the review cycle. Governance that stops after implementation is not governance.
- Take it to the board. I will present it and answer the hard questions if that helps.
The “probably not for you if” paragraph
Useful next
The AI Governance Assessment Pack covers the same ground in outline. If you are working out whether you need help at all, start there.
Not sure where to start?
Tell me what you're facing. You'll get a straight answer on whether this is the right piece of work, and what it would involve.