Current AI use
Where is AI being used, including third-party tools and embedded AI features?
Directors and senior leaders do not need to be AI engineers. They do need enough AI literacy to oversee risk, strategy, accountability and human impact.
AI governance should form part of ordinary oversight of risk, privacy, cyber security, data governance, culture, compliance and performance.

Where is AI being used, including third-party tools and embedded AI features?
How does AI support strategy, service quality, productivity or innovation?
Which uses are acceptable, restricted or not permitted?
Which AI systems affect people, services, employment, safety, rights or reputation?
Are privacy, data, cyber security, procurement and human review controls working?
Do leaders see AI performance, incidents, benefits, issues and emerging risks?
Ask for an AI inventory, clear accountability, high-risk use reporting, incident reporting and evidence that employees and affected stakeholders have been considered.