AI Governance and Risk Management
AI governance is a critical area of focus for organisations. It can comprise many components, some of which may be more mature than others within your organisation.
Many have established AI governance frameworks, usage policies, and risk policies. Challenges in implementing AI include data privacy and security, budget and resource constraints, and legal compliance or liability concerns. Organisations are also preparing for the impact of the EU AI Act, with varying levels of preparedness and anticipated impact.
The survey results reveal a varied landscape in the development and implementation of AI governance structures across organisations. While over half of respondents have an AI Usage Policy (53%) and a Technology Committee or equivalent (53%) already in place, other foundational elements such as AI Risk Policies and AI Procurement Policies are still in earlier stages of development or discussion. Notably, only 20% have a risk policy fully approved, and only 20% have a procurement policy in place.
Encouragingly, nearly half (46%) have designated an individual responsible for AI implementation, signalling growing accountability. However, employee and board-level AI literacy training remains a work in progress, with only 25% having such programmes approved.
These findings underscore the uneven maturity of AI governance and highlight the need for more comprehensive and coordinated efforts as organisations scale their AI capabilities.
AI Strategy

APPROVED AND IN PLACE 29%
IN DRAFT 29%
IN DISCUSSION 33%
NOT STARTED 9%
NOT APPLICABLE 0%
AI Governance Framework

APPROVED AND IN PLACE 29%
IN DRAFT 30%
IN DISCUSSION 27%
NOT STARTED 11%
NOT APPLICABLE 3%
AI Usage Policy

APPROVED AND IN PLACE 53%
IN DRAFT 22%
IN DISCUSSION 19%
NOT STARTED 6%
NOT APPLICABLE 0%
AI Risk Policy

APPROVED AND IN PLACE 20%
IN DRAFT 30%
IN DISCUSSION 29%
NOT STARTED 19%
NOT APPLICABLE 1%
AI Procurement Policy

APPROVED AND IN PLACE 20%
IN DRAFT 10%
IN DISCUSSION 37%
NOT STARTED 25%
NOT APPLICABLE 8%
Employee & Board AI Literacy and Awareness Training Programme

APPROVED AND IN PLACE 25%
IN DRAFT 20%
IN DISCUSSION 34%
NOT STARTED 20%
NOT APPLICABLE 0%
Individual Responsible for AI Implementation

APPROVED AND IN PLACE 46%
IN DRAFT 11%
IN DISCUSSION 25%
NOT STARTED 11%
NOT APPLICABLE 6%
Technology Committee (or Equivalent)

APPROVED AND IN PLACE 53%
IN DRAFT 8%
IN DISCUSSION 15%
NOT STARTED 15%
NOT APPLICABLE 9%
Find out more at arthurcox.com: