AI governance for boards
Your board is accountable for AI, ready or not.
Directors carry the duty for how their organisation adopts AI, often before they are comfortable with it. We give boards the literacy, the controls and the evidence to govern AI responsibly and adopt it with confidence.
Accountability arrives before comfort.
AI is already in use across most organisations: in tools staff adopt quietly, in systems suppliers embed it into, in decisions that affect people’s lives. The board remains answerable for the risk, the fairness and the defensibility of all of it. The distance between that responsibility and the board’s confidence is where governance fails.
Key statistics
The UK AI governance gap, in numbers.
Figures compiled by Governance AI for The Governance Gap: The State of AI Governance in UK Organisations 2026, cited to their original source below.
- 44%
44% of large UK businesses (250 or more staff) were using AI as of December 2025.
ONS, Business Insights and Conditions SurveyFull 2026 report - 7%
Just 7% of UK organisations have fully embedded AI governance, even though 93% already use AI.
Trustmarque, AI governance research 2025 · vendor researchFull 2026 report - 17%
Only 17% of organisations say their board owns AI-governance oversight.
McKinsey, The State of AI 2025 · globalFull 2026 report - 66%
66% of boards have limited-to-no knowledge or experience of AI.
Deloitte, Governance of AI · globalFull 2026 report - 362
362 AI incidents were documented worldwide in 2025, up 55% year on year.
Stanford HAI, 2026 AI Index · globalFull 2026 report
The obligations arrive on a schedule. Readiness is a board decision.
The dated duties a UK board is already governing under, and the ones arriving next. None of them waits for the board to feel comfortable.
EU AI Act prohibitions and AI literacy duties apply
Data (Use and Access) Act 2025 receives Royal Assent
EU AI Act: obligations on general-purpose AI models
Articles 22A to 22D in force, replacing UK GDPR Article 22
FCA and PRA reaffirm a technology-neutral approach to AI
ICO consultation closes; final ADM guidance expected summer 2026
EU AI Act high-risk obligations: stand-alone systems*
EU AI Act high-risk obligations: systems embedded in products*
The five areas
What good board AI governance covers.
Five areas decide whether a board can govern AI well. They are the areas the Board AI Scorecard measures.
01
Accountability & board oversight
Who owns AI at board level, and how often the board looks at it.
02
AI policy & controls
Whether AI use is governed by an approved policy and an approval route.
03
Risk, transparency & assurance
Visibility of AI risk, and readiness for ISO/IEC 42001, EU AI Act exposure and UK GDPR.
04
Data & security
Whether you can see what AI staff already use, and govern its data and security risk.
05
Board literacy & capability
How well the board can scrutinise an AI decision put in front of it.
Useful tools before the next board meeting.
Each tool produces a concrete artefact: a register, checklist, release gate, board-paper outline or incident playbook. Start with the one matching the decision in front of you.
AI Risk Register Generator
Turn AI risks into owners, controls, evidence and next actions.
Open the toolShadow AI Discovery Tool
Map where unmanaged AI use is most likely across your functions.
Open the toolISO/IEC 42001 Readiness Checker
Check ISO/IEC 42001 readiness for your AI management system. Get a board-level gap read, evidence list and next actions. Free, no login.
Open the toolAI Vendor Due Diligence Checklist Generator
Generate a practical AI vendor due diligence checklist for UK procurement, legal and risk teams. Free, no login.
Open the toolAI Go-Live Gate Checker
Check whether an AI system is ready to go live. Get a board-level release gate, blockers, evidence and next actions. Free, no login.
Open the toolAI DPIA and Automated Decision Screener
Screen AI use for DPIA and automated-decision risk under UK GDPR. Get likely triggers, evidence needs and next actions. Free, no login.
Open the toolAI Board Paper Builder
Build a board-ready AI approval paper outline covering purpose, benefits, risks, controls, evidence and the decision requested. Free, no login.
Open the toolAI Incident Response Playbook Generator
Generate an AI incident response playbook for data leaks, harmful outputs, bias challenges, vendor failure and model drift. Free, no login.
Open the toolHow we help
Board-level governance, grounded in practice.
Our advisory is grounded in the practice of our founder, Karl George MBE, creator of the TGF Governance Code.
AI Wake-Up Call
A board literacy session that gets directors fluent in the AI decisions in front of them: what to ask, what to govern, and what to leave alone.
Book a 15-minute callGovernIQ™ Diagnostic
A structured read of where your AI governance stands today, with a scored picture, the gaps that matter most, and a prioritised plan to close them.
About the diagnosticBy sector
The same accountability, shaped to your sector.
The duty on the board does not change. The regulators, the data and the questions do. We have set out the board AI governance picture for these sectors.
See where your board stands.
The Board AI Scorecard takes about two minutes and gives you a readiness score, your weakest area, and a recommended next step.