How AI is Transforming Governance Practices

By 2028, Boards of Directors will not be able to treat AI as a side conversation or a delegated technical issue. AI is becoming a core governance responsibility. As risk velocity accelerates and corporate complexity deepens, boards must develop algorithmic awareness, AI fluency, and new oversight muscles. Fiduciary duty will increasingly depend on how well directors understand AI driven risk sensing, ethical governance, strategic foresight, board effectiveness, and stakeholder sentiment. The boards that lead will not just react faster. They will govern smarter, anticipate disruption earlier, and build long term trust with investors, regulators, and society. I break this down in the latest piece, 2028 Boardroom Playbook: Using AI to Lead, Govern, and Win, with five concrete AI use cases every board should understand now. Read more about it here: https://lnkd.in/evUMrFR2 AI is no longer just a tool for management. It is becoming a compass for modern governance.

The real challenge is not scaling AI agents, it is scaling Governance! As organizations shift from deploying AI as isolated tools to orchestrating multi-agent systems, governance must evolve with it. It’s no longer just about minimizing harm—it’s about enabling responsible autonomy at scale. This is where the Responsible Autonomy Framework (RAF) comes in. 🧭 On the left: Why we govern - Accountability - Transparency & Explainability - Ethical Alignment - Security & Resilience ⚙️ On the right: What we must govern as autonomy grows - Autonomy Control - Interaction & Coordination - Adaptability & Evolution - Interoperability Each pairing demands new or uplifted capabilities—but here’s the key: governance isn’t one-size-fits-all. It depends on your organization’s AI maturity level. Below are just a few examples to illustrate how agentic AI governance capabilities shift as maturity increases: 🔹 Level 1 – Adhoc use of AI tools Begins to lay the groundwork for responsible and ethical scale: - Ownership structures - Logging and audit trails - Data management policies 🔹 Level 2 – Repeatable use of AI Tools AI begins supporting human workflows. Examples of what Governance must now address include: - Human-in-the-loop safeguards - Explainability dashboards - Responsibility mapping for augmented decisions 🔹 Level 3 – Management of AI Agents. AI starts to take action. This demands governance mechanisms such as: - Autonomy control matrices (who decides what) - Interaction design policies for human-agent and agent-agent coordination - Resilience testing for unpredictable scenarios 🔹 Level 4 – Governance of Mult-Agent Systems AI shapes business outcomes and adapts strategies. Governance needs to catch up: - Ethical scenario simulation tools - Behavioral monitoring agents - Cross-system interoperability standards 🔹 Level 5 – Autonomous Force (Speculative) Here, governance isn’t just about rules—it’s about readiness: - Can your controls evolve as fast as your AI? - Are you governing at the ecosystem level? - Are you building for explainability in unknown contexts? 👉 These are not complete lists—they’re signals of the kinds of capability shifts that must occur across maturity levels. Every step up the maturity curve amplifies both opportunity and risk. The takeaway? AI governance isn’t a compliance checkbox. It’s an evolving capability in its own right—a leadership function that determines whether your AI empowers or entangles. It is a challenge that spans mindset, culture, processes, structure, and methodology. I think the right foundation will be more critical than ever. And I think only Architects can define it. What do you think? Where on the AI governance journey are you?

The Annual AI Governance Report 2025 by the International Telecommunication Union (ITU) provides a comprehensive overview of how nations, institutions, and innovators are guiding AI towards a responsible global impact. The Rise of AI Agents:- AI Agents have transitioned from copilots to autonomous digital workers, engaging in tasks such as booking trips, coding, and negotiating purchases. This shift raises critical questions about traceability, liability, and visibility. Governance frameworks are rapidly evolving, proposing agent identifiers, activity logs, and safe-harbour regimes to ensure accountability. Bridging the AI Divide:- As AI transforms industries, many nations still lack adequate computing resources. The report notes that over 150 countries do not have significant AI compute hubs, highlighting the urgent need for inclusive AI infrastructure, skills, and standards that allow broader participation beyond the Global North. The Global Governance Mosaic:- International coordination is accelerating through initiatives like the Bletchley, Seoul, and Paris AI Summits, along with regional collaborations (ASEAN, AU, GCC, EU). However, challenges remain in policy interoperability and the establishment of shared safety infrastructure. Ten Pillars for AI Governance:- The report concludes with a framework focused on transparency, inclusion, environmental sustainability, compute governance, and agile regulation, setting the stage for the UN Global Dialogue on AI Governance in 2026. ⛵ “We do not need to sail in the same ship, or at the same speed, but we do need to navigate the same oceans by the same compass.” — Doreen Bogdan-Martin, ITU Secretary-General Read the attached full report for deep insights into the evolving landscape of AI governance across agents, safety, and standards. #AIGovernance #AIForGood #ResponsibleAI #AIStandards #AgenticAI #AI2025 #GlobalAI #Inclusion #EthicalAI #DigitalCooperation

AI is not just a technological revolution - it is a policy revolution. Here is my perspective on how AI will reshape public sector policies in the next 10 years. Enhanced governance and decision-making: Governments will increasingly rely on AI-powered data analytics to make real-time, evidence-based decisions. Predictive analytics will help policymakers anticipate economic shifts, public health crises, and climate change impacts, enabling proactive interventions. The UAE AI Strategy 2031 mandates 100% AI adoption in government for data-driven decision-making, ensuring more effective governance. Revolutionizing Public Services: From healthcare and education to transportation, AI-powered solutions are making public services smarter and more accessible. The UAE is leading the way in generative AI, with Dubai AI acting as a virtual city concierge, assisting citizens and businesses. Additionally, the UAE government has started integrating AI-driven search capabilities into its official websites, enabling faster, more relevant information retrieval for users. The Agentic AI revolution has just begun and I believe we will see more AI-powered public services as AI adoption matures and as we resolve current limitations and challenges with generative AI such as inaccuracy and unreliability. Transformation of Labor Markets: AI will automate repetitive tasks but also create demand for new skills, particularly in data analytics, cybersecurity, and AI ethics. Governments worldwide are investing in reskilling programs to future-proof their workforce. The UAE is ahead of the curve, launching a major reskilling initiative in 2024 in collaboration with Microsoft, aiming to train 100,000 government employees on AI. Ethical & Inclusive AI Policies: With AI becoming more pervasive, governments must ensure its ethical and responsible use. Over the next decade, public policies will focus on regulating AI development, ensuring it serves all citizens equitably and does not reinforce biases or inequalities. AI for Sustainability: Governments will leverage AI to combat climate change, optimize energy consumption, and develop green technologies. However, the sustainability dilemma of AI itself - including its energy-intensive computational requirements - must also be addressed to ensure AI is part of the solution, not the problem. Global Collaboration on AI Governance: AI governance cannot be tackled in isolation. The WGS 2025 and other international forums highlight the urgent need for global cooperation in setting AI standards, sharing best practices, and addressing risks such as AI safety, misinformation, and environmental impact. The next decade will determine whether governments can harness AI to build more efficient, inclusive, and sustainable societies. The UAE is already paving the way, but global collaboration, innovation, and responsible governance will be essential in shaping the AI-powered public sector of the future. #WGS25 #LinkedInNewsMiddleEast

Is your Board ready for the most consequential phase of AI? 🚀 AI is no longer just a "tech topic" - it’s a fundamental shift in how value is created and how organizations are governed. I’ve been diving into the new AI Governance Principles for Boards developed by KPMG in collaboration with the INSEAD Corporate Governance Centre. These five principles offer a roadmap for directors to move from experimentation to enterprise-wide transformation with confidence. The 5 Pillars of AI Governance: 1️⃣ Strategy: Oversight of AI for long-term value, not just short-term gains. 2️⃣ Technology: Managing sovereignty, security, and vendor dependencies. 3️⃣ Workforce: Defining human-in-the-loop accountability and upskilling. 4️⃣ Trust: Ensuring AI is fair, inclusive, and environmentally responsible. 5️⃣ The Board itself: Updating governance structures to match the pace of AI. As Annet Aris (INSEAD) notes, trust isn't a constraint on AI - it’s the foundation that allows it to scale. The stakes are high. The decisions boards make today will determine which companies lead tomorrow. Read the full report to sharpen your boardroom judgment. Stephen Chase | Theodoros Evgeniou | Tanmay D. | Samantha Gloede Keane | Dhawal Jaggi #AIGovernance #CorporateGovernance #AIStrategy #Leadership #KPMG #INSEAD #DigitalTransformation #BoardOfDirectors

Most AI governance conversations still orbit around two questions: is the data trustworthy, and is the model fair and explainable? Both matter, but neither is sufficient for what is actually happening right now. As organisations move from chatbots to autonomous agents, the governance challenge shifts. It is no longer just about how a model behaves, it's about how an agent acts. An AI model generating a recommendation sits in a very different risk category from an AI agent approving a transaction, modifying a record, invoking an API, or executing a workflow without a human in the loop. That distinction changes what governance needs to do, and most current frameworks were not designed with it in mind. The questions we need to be asking have expanded considerably. What is the agent authorised to do? Which tools can it access? Which workflows can it execute? Who is accountable when it acts, and what happens when it exceeds its authority? Which controls operate at the moment of action, not after the fact? This is why I see four distinct governance domains that need to work together. Data Governance ensures information is accurate, traceable and trusted. AI Governance ensures models are safe and aligned with policy. Agent Governance defines what autonomous systems are permitted to do and under what conditions, and Runtime Governance determines, at the moment an action is attempted, whether it should execute, escalate or be rejected outright. Risk management, identity, security and continuous assurance, as the foundation everything else sits on. The future of AI governance is not simply about governing models, it's about governing autonomous action. Curious to know how others are approaching Agent Governance and Runtime Governance in their organisations. #AIGovernance #AgenticAI #AIRiskManagement

2026 is the year AI governance gets teeth. No more voluntary guidelines. No more "we'll figure it out later." Regulators are moving from principles to enforcement. If you lead a team using AI, here are 6 things to act on now: 1. Audit your high-risk AI systems The EU AI Act is live. You need documentation, risk assessments, and incident reporting. Start mapping which of your systems qualify. 2. Check your state-level exposure Colorado's AI Act kicks in this year. If your AI touches hiring, lending, or insurance, you need bias assessments now. 3. Track the federal shift Trump's December 2025 AI Executive Order signals federal consolidation of AI oversight. Monitor how it impacts your state obligations. 4. Govern your AI agents, not just models AI agents now execute actions. Transactions. Scheduling. Resource allocation. Build runtime guardrails and escalation paths before something breaks. 5. Kill the black box Healthcare already demands explainability artifacts before adopting AI. Your industry is next. Start documenting how your models make decisions. 6. Scan your AI-generated code 80%+ of critical infrastructure enterprises already ship AI-written code. Most without security visibility. Run provenance checks on every line in production. The pattern is clear: AI governance is no longer a compliance exercise. It's becoming the operating model. The companies building governance into their AI strategy now will move faster, not slower. What's the first thing you're tackling? ⬇️ Let me know in the comments Want to succeed with AI? → Join AI-Empowered Leaders: My weekly newsletter with actionable AI insights from my work as AI-advisor, trainer & coach. Sign up here 👇 https://lnkd.in/eUmy2Bdp

Many executive teams are treating AI governance as something new. New committees. New AI policies. New risk frameworks. The reality: If your data governance is weak, your AI governance is performative. AI governance isn’t a separate program. It is the direct expression of your data governance maturity. And the organizations pulling ahead understand that. 1/ You Cannot Govern What You Cannot Trace AI amplifies the foundation it sits on. If your data is: → Fragmented → Poorly classified → Inconsistently defined → Lacking lineage visibility Your AI outputs will be: → Hard to explain → Difficult to audit → Risky to scale If you cannot trace where data originated, how it was transformed, and who owns it, you cannot credibly govern AI built on top of it. 2/ Data Ownership Determines AI Accountability AI governance often focuses on bias and oversight. But accountability starts earlier. → Who owns the data feeding the model? → Who defines quality thresholds? → Who approves usage rights? If those answers are unclear, AI accountability will be too. Clear data ownership creates clear AI accountability. 3/ Governance Must Move From Documentation to Execution Policy-heavy governance collapses under AI velocity. Leading organizations embed: → Automated classification → Real-time lineage tracking → System-enforced access controls → Policy execution within workflows Governance must operate in the system. 4/ Unification Reduces Hidden Risk When data definitions differ across business units, outputs become inconsistent. When systems are fragmented, risk visibility becomes partial. Unifying definitions, taxonomies, and metadata reduces hidden risk and accelerates deployment. 5/ AI-Specific Controls Only Work on a Strong DG Foundation With mature DG, AI governance becomes achievable: → Human-in-the-loop review for regulated decisions → Bias and drift monitoring → Model performance tracking → Audit trails linking outputs to source data Without strong DG, these controls are cosmetic. 6/ Trust Is Built on Data Discipline AI adoption is fundamentally a trust issue. Employees won’t rely on outputs they can’t explain. Boards won’t scale what they can’t see. Data governance builds: → Accuracy → Transparency → Reproducibility Trust is a structural outcome of disciplined governance. 7/ Governance Maturity Drives Risk-Adjusted Speed Governance is often treated as a cost center. But governance maturity determines AI velocity. Organizations with strong DG can: → Deploy AI faster → Scale it safely → Withstand scrutiny → Respond quickly to issues Their innovation is not just faster; it’s safer. Instead of asking: “Do we have AI governance?” Ask: “Is our data governance mature enough to support AI at scale?” Save this for future reference.

𝗧𝗵𝗲 𝗳𝗮𝘀𝘁𝗲𝘀𝘁-𝗴𝗿𝗼𝘄𝗶𝗻𝗴 𝗔𝗜 𝗰𝗼𝗻𝘃𝗲𝗿𝘀𝗮𝘁𝗶𝗼𝗻 𝗶𝗻 𝗶𝗻𝘀𝘂𝗿𝗮𝗻𝗰𝗲 𝗿𝗶𝗴𝗵𝘁 𝗻𝗼𝘄 𝗶𝘀𝗻’𝘁 𝗮𝗯𝗼𝘂𝘁 𝗮𝘂𝘁𝗼𝗺𝗮𝘁𝗶𝗼𝗻. 𝗜𝘁’𝘀 𝗮𝗯𝗼𝘂𝘁 𝗴𝗼𝘃𝗲𝗿𝗻𝗮𝗻𝗰𝗲. Most insurers didn’t expect it. But in 2025, AI governance has become just as important as AI innovation. Boards aren’t asking, “How fast can we deploy AI?” They’re asking, “Can we trust the decisions it influences?” Regulators in the US, UK, and EU have made one thing clear this year: 𝗔𝗜 𝘀𝘆𝘀𝘁𝗲𝗺𝘀 𝗺𝘂𝘀𝘁 𝗯𝗲 𝗲𝘅𝗽𝗹𝗮𝗶𝗻𝗮𝗯𝗹𝗲, 𝘁𝗿𝗮𝗰𝗲𝗮𝗯𝗹𝗲, 𝗮𝗻𝗱 𝗮𝗰𝗰𝗼𝘂𝗻𝘁𝗮𝗯𝗹𝗲—𝗲𝘃𝗲𝗻 𝘄𝗵𝗲𝗻 𝘁𝗵𝗲 𝘂𝗻𝗱𝗲𝗿𝗹𝘆𝗶𝗻𝗴 𝗺𝗼𝗱𝗲𝗹𝘀 𝗮𝗿𝗲 𝗰𝗼𝗺𝗽𝗹𝗲𝘅. This has shifted the conversation inside insurers dramatically. Here is how AI is being used in compliance and governance today: • It logs every decision AI touches, so auditors see the full trail. • It explains why certain recommendations were made in simple language. • It identifies bias patterns long before they become regulatory issues. • It tracks data lineage so teams know exactly what fed each output. • It alerts leaders when a model’s behavior drifts from approved parameters. • It generates documentation that once took compliance teams weeks to prepare. This isn’t slowing innovation; it’s enabling it to scale responsibly. 𝗪𝗵𝗲𝗿𝗲 𝘁𝗵𝗶𝘀 𝗶𝘀 𝗵𝗲𝗮𝗱𝗶𝗻𝗴 𝗻𝗲𝘅𝘁 (2026–2030) Regulatory AI will evolve even faster: • Real-time explainability dashboards for regulators and boards. • Automated compliance checks integrated into underwriting and claims workflows. • Model certificates that prove ethical and operational integrity. • Governance bots that review every model update before deployment. • Continuous monitoring frameworks that evaluate fairness across customer segments. • Risk scoring for AI systems—just like capital or claims risk. The winners will not be the insurers who build AI the fastest. But the ones who build AI that stands up to scrutiny. AI will transform insurance, but only insurers who master governance will transform with it. Compliance is no longer a guardrail; it’s a competitive advantage.

AI is transforming GRC and Internal Audit by improving speed, coverage, and insight. In GRC, it supports activities such as monitoring regulatory changes, identifying emerging risks, analyzing third-party exposures, detecting anomalies, and strengthening compliance oversight. In Internal Audit, AI helps enhance risk assessment, audit planning, control testing, document review, continuous auditing, and exception analysis. This allows teams to focus more on high-risk areas and strategic judgment rather than manual and repetitive tasks. At the same time, AI introduces new risks that must be governed carefully. These include inaccurate outputs, bias, limited explainability, data privacy concerns, cybersecurity exposure, and overreliance on automated results. Therefore, organizations should view AI in two ways: as a tool that strengthens GRC and audit work, and as a subject that itself requires governance and assurance. A sound approach includes clear accountability, approved use cases, human oversight, data controls, monitoring, and periodic internal audit review to ensure AI is used responsibly and effectively. I believe that, by now, most GRC and Internal Audit functions have already positioned AI as a key initiative and a strategic pillar within their overall transformation agenda, which requires clear governance, the right skills, disciplined implementation, and strong oversight to ensure its use delivers value in a responsible and effective manner.