AI GRC SG Community · AI governance
Posted by Dr Jenny Tan4 Sep 2026 ·
Who should own AI risk: the board, the CIO, the data team — or everyone?
Posted by Dr Jenny Tan4 Sep 2026 · 
Every organisation I speak to is experimenting with AI. Far fewer can tell me who is accountable when a model discriminates, leaks data or simply gets it wrong.
Management wants speed; boards want assurance; governance, risk and compliance teams want control. All three are right, and the gap between them is where projects stall — or, worse, ship without oversight.
Angles to consider
- Does your organisation have a named owner for each AI use case?
- Where does AI sit on the board agenda — under technology, risk or strategy?
- Is 'the algorithm decided' ever an acceptable answer to a customer or a regulator?
Jenny's opening view
I lean towards shared accountability with a single named owner per use case, and the board setting the risk appetite before anything scales. Practitioners — does that survive contact with reality?
Enjoying the discussion?
Subscribe to hear about new questions, or invite Jenny to bring the conversation to your organisation.
Discussion ·