Blog
NIST Didn’t Publish an AI Framework. It Built a Stack.
I have a confession. For someone who has spent most of the last several years living inside IT Governance, I have a long-standing soft spot for NIST publications, and it predates AI by more than a decade. The document that hooked me was the Cybersecurity Framework...
AI Doesn’t Erode Trust. It Exposes Whether You Ever Had Any.
Several months ago, a risk committee chair for a client of mine asked a question that I have not been able to shake: "An agenda item on our next board meeting is to address digital trust now that we are enabled by AI. How do we do that?" Notice what she was not...
A PRACTICE OF ONE: We Sell Judgment, Not Capacity. Here Is What AI Does To Us Next
This one is not for the boards. This one is for the small ‘boutique’ firms and one-person consultants. A personal note before I go any further. Many of you reading this are not just readers. You are my friends, and we have likely had this very conversation in the last...
Who Owns AI? Your Org Chart Is Answering the Wrong Question
AI ownership is distributed. Accountability isn’t. And most organizations are confusing the two. A client sent me an “AI org chart” last week. It was good. CEO at the top. Chief AI Officer, CTO, CIO, and COO below. AI engineering, data governance, product management,...
My Digital Twin Just Told Me No
I am a one-person company. I wrote the AI policy myself. Approved it myself. And there I was, months later, quietly trying to bend it…and the thing I built to sound like me was the only one willing to say I was out of bounds. There was nobody else in the room. When...
AI Did in Two Years What Many Couldn’t Do in Thirty
No, this is not another story about digital transformation and AI. What AI did is more elementary than that. It forced us to think about governance again. Now, before you start thinking about challenging me because your organization is embracing and succeeding at...
The AI Governance Question COBIT Answered 30 Years Ago
My grandmother's cast-iron skillet outlived three microwaves, two bread machines, a fondue set, an air fryer, and one very ambitious juicer that now lives in the garage next to the treadmill. Every few years, a shiny new appliance arrived promising to change dinner...
Singapore Just Wrote the Agentic AI Rulebook Everyone Else Is Still Debating
THE QUESTION I ASK EVERY BOARD NOW Last month, I sat with a CIO who told me proudly that his company had "27 AI agents in production." I asked him a simple follow-up: can you name all 27, tell me what each one is authorized to touch, and show me who signs off when one...
AI Agents Don’t Fail. Governance Does.
The technology is usually not the problem. The lack of governance is. That one sentence explains most of what I am seeing in the AI agent space right now. I’ve read a lot of very pointed posts on social media about how organizations are pulling deployed AI customer...