AI Governance and Risk Management

AI governance is a critical area of focus for organisations. It can comprise many components, some of which may be more mature than others within your organisation.

Many have established AI governance frameworks, usage policies, and risk policies. Challenges in implementing AI include data privacy and security, budget and resource constraints, and legal compliance or liability concerns. Organisations are also preparing for the impact of the EU AI Act, with varying levels of preparedness and anticipated impact.

The survey results reveal a varied landscape in the development and implementation of AI governance structures across organisations. While over half of respondents have an AI Usage Policy (53%) and a Technology Committee or equivalent (53%) already in place, other foundational elements such as AI Risk Policies and AI Procurement Policies are still in earlier stages of development or discussion. Notably, only 20% have a risk policy fully approved, and only 20% have a procurement policy in place.

Encouragingly, nearly half (46%) have designated an individual responsible for AI implementation, signalling growing accountability. However, employee and board-level AI literacy training remains a work in progress, with only 25% having such programmes approved.

These findings underscore the uneven maturity of AI governance and highlight the need for more comprehensive and coordinated efforts as organisations scale their AI capabilities.

AI Strategy

AI Strategy chart

APPROVED AND IN PLACE 29%

IN DRAFT 29%

IN DISCUSSION 33%

NOT STARTED 9%

NOT APPLICABLE 0%

AI Governance Framework

AI Governance framework chart

APPROVED AND IN PLACE 29%

IN DRAFT 30%

IN DISCUSSION 27%

NOT STARTED 11%

NOT APPLICABLE 3%

AI Usage Policy

AI Usage policy chart

APPROVED AND IN PLACE 53%

IN DRAFT 22%

IN DISCUSSION 19%

NOT STARTED 6%

NOT APPLICABLE 0%

AI Risk Policy

AI Risk policy

APPROVED AND IN PLACE 20%

IN DRAFT 30%

IN DISCUSSION 29%

NOT STARTED 19%

NOT APPLICABLE 1%

AI Procurement Policy

AI procurement policy

APPROVED AND IN PLACE 20%

IN DRAFT 10%

IN DISCUSSION 37%

NOT STARTED 25%

NOT APPLICABLE 8%

Employee & Board AI Literacy and Awareness Training Programme

Employee & Board AI Literacy and Awareness Training Programme chart

APPROVED AND IN PLACE 25%

IN DRAFT 20%

IN DISCUSSION 34%

NOT STARTED 20%

NOT APPLICABLE 0%

Individual Responsible for AI Implementation

Individual responsible for AI Implementation chart

APPROVED AND IN PLACE 46%

IN DRAFT 11%

IN DISCUSSION 25%

NOT STARTED 11%

NOT APPLICABLE 6%

Technology Committee (or Equivalent)

Technology committee chart

APPROVED AND IN PLACE 53%

IN DRAFT 8%

IN DISCUSSION 15%

NOT STARTED 15%

NOT APPLICABLE 9%

Find out more at arthurcox.com:

Technology and Innovation Group
Governance and Consulting Services
AI Briefings, Insights, Videos and Podcasts