Governance vs. Policy: The Board’s Role 

To govern effective innovation, it is vital to distinguish between Governance and Policy. 

• Governance is the structure: The Board setting the Risk Appetite, retaining oversight and ensuring the policy aligns with the company’s culture and strategy. 

• Policy is the mechanism: The operational rules that enact the Board’s will. 

If the Board’s strategy is “Innovation,” but the policy is “Restriction,” a strategic gap emerges. This misalignment is often the root cause of “Shadow AI”- where staff inadvertently bypass security to achieve their targets. Therefore, a smart policy is a tool for cultural alignment. 

Oversight of the UK’s 5 Principles 

The UK’s principles-based approach plays to the advantage of agile Boards. Rather than navigating a single rigid law, Boards must ensure their policy framework addresses five key areas to ensure the effective execution of their duties, forming the foundation of responsible AI in governance and risk management:

1. Safety, Security and Robustness: The Board must be assured that risks are identified and mitigated throughout the AI lifecycle. 
2. Appropriate Transparency and Explainability: The Board should champion a culture where AI use is declared, not hidden. 
3. Fairness: Oversight is required to ensure AI does not violate the Equality Act 2010 or UK GDPR through algorithmic bias. 
4. Accountability and Governance: The Board must ensure clear lines of ownership are established; accountability for AI outcomes must sit with a designated officer. 
5. Contestability and Redress: A firm must ensure that there is a viable route for challenging AI errors. 

Bridgehouse: Your Governance Partner 

Ensuring your framework is robust requires an objective view. Bridgehouse offers a three-phased AI Governance Review service, to ensure your governance structure is fit for the AI era, covering:  

1. Discovery 
2. Gap Analysis 
3. Implementation 

Sign up here to join our monthly AI in the Spotlight – Boardroom Priorities series to download The Boardroom Guide to Responsible AI Policy Frameworks and to receive in-depth guides and practical frameworks for strategic AI leadership monthly.