As the use of artificial intelligence (AI) continues to make waves throughout the enterprise landscape, the importance of its governance and the development of organizational AI policies remains a hot topic. A recent “Ask Me Anything” discussion with Meghan Maneval, a distinguished figure in the cybersecurity and governance, risk management, and compliance (GRC) sectors, brought forth many insights into the ever-evolving landscape of AI governance.
The Ask Me Anything discussion, which took place on ISACA’s Engage online community delved into the benefits, challenges, and curiosities that come with governing AI.
Several discussion questions centered around best practices and suggestions for developing a robust governance framework for AI. “Start with an AI policy,” wrote Maneval as part of the discussion. “This should include your vision for AI usage, the roles and responsibilities, and any guiding principles related to your organization’s AI usage.”
Maneval also noted it’s best to begin with education. “Be sure you’re developing internal education and board-specific education to get everyone comfortable and bought in.” Maneval recommends regularly reporting on the “progress of your AI initiatives and to present lessons learned along the way to your board and relevant stakeholders.”
When one participant’s question centered on regaining control of the global vision and cross-functional understanding that can often be lacking, Maneval shared, “I urge companies to resist the temptation to pursue AI for the sake of AI. Really consider your business goals and how AI can help or hinder your success… Look for inefficient processes within the strategic plan and look for ways AI can make them more efficient or help the organization meet its goals sooner.”
One discussion writer noted that for companies with employees who recognize the great potential of AI, it can still be hard to convince the board of the benefits. In her response, Maneval wrote that when trying to convince anyone of anything, transparency and collaboration are the biggest thing, and that it’s best to present to the board how AI will impact them. “Provide a cautionary tale using a real example of a company impacted by rogue AI,” Maneval suggested. “Show them how AI risk will be integrated into existing risk management.”
The conversation also focused on the role leaders and executives play in championing responsible AI governance within their organizations. Maneval wrote, “Company leadership, executives, and the board set the tone for AI governance, which is why it is key to ensure they are aware and comfortable with it.” Maneval recommends executives take training on AI, keeping it high-level.
Catch up on the entire Ask Me Anything thread on Engage here.
Submit topic and guest ideas for upcoming Ask Me Anything sessions to volunteer@isaca.org.