AI inventory
Identify where AI is used, by whom and with what data.
Services · AI Governance & Responsible AI
AI Governance & Responsible AI
Adopt AI with clear accountability and controls the board understands.
Arrange a meetingWhy it matters
AI tools are being adopted across financial services, often faster than governance can keep up. Boards need to know where AI is used, what risks it introduces and who is accountable. We help leaders put proportionate governance in place so AI supports the business without creating unmanaged exposure.
Questions this engagement answers
- 01Where is AI being used across the organisation, including by staff informally?
- 02What data are we sharing with AI tools and providers?
- 03Who is accountable when an AI-supported decision goes wrong?
- 04How does AI risk fit within our existing risk framework?
What the engagement can include
Governance framework
Policies, roles, approval routes and risk assessment proportionate to your use of AI.
Security & data risk
Assess data leakage, supplier, model and security risks introduced by AI tools.
Board briefing
Help directors understand AI risk and set appropriate oversight.
How we work
- 1
Discover
Understand current and planned AI use, including informal use by staff.
- 2
Assess
Identify the risks that matter for your data, customers and regulation.
- 3
Govern
Put proportionate policies, roles and controls in place.
- 4
Oversee
Build reporting so the board can monitor AI risk over time.
What you receive
- AI usage inventory and risk overview
- AI governance policy and accountability model
- Risk assessment approach for new AI uses
- Board briefing and reporting recommendations
Illustrative scenario
Helpful tools, unknown data flows
Staff across several teams start using public AI tools to summarise documents and draft correspondence. Nobody has assessed what client data is being entered or where it is stored. A short discovery exercise, a clear usage policy and approved alternatives reduce the risk quickly without stopping useful work.
Buck's view
“AI governance does not need to start from scratch. Most organisations can extend existing risk, data and supplier controls, provided someone is clearly accountable for doing it.”
Professor Buck Rogers, Poro Advisory