Executive Summary For a couple of years, "AI governance" at most companies meant one overworked person in legal or compliance quietly adding "and also AI, I guess" to an already full job description. That era is closing out fast. Through 2026, AI oversight has been pulled out of the side-desk pile and turned into a formal executive function, with its own title, its own budget line, and increasingly, its own seat that reports straight to the CEO or the board. I'll be honest ab

Introduction Somewhere in the last two years, AI quietly moved from "an IT initiative" to "a board-level risk." Most companies haven't caught up to that shift yet. We say this from experience training directors across sectors: AI is still, in far too many boardrooms, something the CIO updates the board on once a quarter, in a slide or two, somewhere near the bottom of the agenda. That's no longer good enough. AI systems are now making decisions that affect customers, employee

Executive Summary There's a date sitting on a lot of compliance calendars right now that deserves more attention than it's getting: 2 August 2026. That's when the bulk of the EU AI Act's high-risk obligations become fully enforceable, and along with it, two things that used to live in the "nice engineering hygiene" bucket, model cards and data lineage documentation, become audit requirements with real teeth behind them. I want to be upfront about something before we go furthe

Executive Summary Somewhere inside your organization right now, an AI agent is probably doing something nobody explicitly asked it to do in that exact way. Approving a small vendor payment, maybe. Drafting a compliance filing. Or talking to another company's AI agent, with neither human on either side actually watching that exchange happen. Welcome to agentic AI, and to the reason "AI governance" quietly stopped meaning "who fact-checks the chatbot" and started meaning someth

Executive Summary A few years back, if a regulator asked a company about its AI oversight, a nicely worded policy document and an ethics statement on the website would usually get you through the conversation. That's genuinely not true anymore, and it's not true because of one single dramatic law. It's true because a handful of state-level regulators in the US, along with EU enforcers, started asking a much more annoying question this year: prove it. The thing forcing that qu

Executive Summary There's a specific kind of governance gap that doesn't show up until someone actually asks the awkward question out loud: not "does your board discuss AI," but "if your AI-powered dashboard flagged something dangerous right now, is there a written policy telling anyone what happens next?" A lot of boards, when they actually sit with that question, don't love their own answer. I covered the AI expertise gap in a companion piece already, the fact that a striki

Executive Summary For two decades, the internet sold us one simple promise: build a product once, and ship it everywhere. Borders were for passports and shipping containers, not software. That promise is quietly falling apart. In 2026, governments have started treating artificial intelligence as strategic territory — something to protect, fence and fight over. The result is what lawyers politely call geopolitical fragmentation: a world where the same AI product needs differen

Here is a quiet number that has been making the rounds in CFO conversations for the last six months. Ninety-five percent. That is the share of corporate generative AI pilots that have not produced a measurable impact on profit and loss, according to a July 2025 report from MIT's NANDA initiative called The GenAI Divide. Between thirty and forty billion dollars has been spent on enterprise AI. Five percent of those pilots are extracting millions in real value. The other ninety

Let me start with a question most boards have not yet asked themselves out loud. If an AI agent in your company places an order, signs off a refund, files a customs entry, or sends a quote to a client at 3 AM on a Sunday — and gets it wrong — who exactly is accountable on Monday morning? If you paused for a second there, you are not alone. That pause is the whole problem with agentic AI governance right now. Boards across India, the US, and Europe are sitting on a quiet shift