What Boards Actually Need to Govern AI
Board AI governance is not about technical understanding. Directors do not need to understand transformer architecture or fine-tuning. They need to understand three things:
Strategic implications: How is AI changing the competitive dynamics of the markets the organisation operates in? What is the organisation's competitive AI position? Is the current AI investment strategy likely to produce the claimed advantages?
Material risks: What are the AI-related risks that could affect the organisation materially? This includes the risk of AI failure (reputational, regulatory, financial), the risk of under-investment (competitive displacement), and the risk of governance failure (accountability gaps, regulatory exposure).
Governance adequacy: Is the current AI governance framework sufficient? Who is accountable for AI decisions? How are AI risks identified and managed? Is there adequate human oversight of consequential automated decisions?
The Board Competency Gap
A 2024 survey of FTSE 350 boards found that fewer than 30% of directors felt equipped to evaluate AI strategy, and fewer than 15% had meaningful personal experience with AI tools. This is a real governance gap — not because directors need to be technologists, but because evaluating management's AI strategy requires enough contextual understanding to ask good questions and recognise implausible claims.
The minimum personal experience that closes the credibility gap: 2-3 hours of hands-on use of primary AI tools on real tasks. This is not a technical education — it's an experiential anchor. A director who has used Claude or GPT-4 to analyse a document, draft a briefing, or explore a question has enough direct experience to evaluate claims about what AI can and cannot do.
Building AI Competency on the Board
Four practical mechanisms:
Director education sessions: Not "AI 101" but "AI in our sector": 3-4 hours focused on specific competitive dynamics, material risks, and governance frameworks relevant to the organisation. Should include hands-on time, not just presentations.
AI fluent non-executives: At least one director with meaningful AI background — either technical experience or deep AI strategy experience. Not to provide technical oversight, but to ensure the board has one member who can genuinely evaluate AI strategy quality.
AI in risk reporting: AI risks explicitly included in the board risk register with regular reporting against them. Not in technology committee only — at full board level.
Management briefing quality: Agree with management on a standard for AI reporting that includes competitive position, strategic progress against stated goals, governance review, and honest reporting of what isn't working.
Briefing the Board Effectively
Management briefings that work for AI have four characteristics: they connect AI activity to competitive position rather than listing features; they include honest assessment of what isn't working alongside what is; they address risk explicitly rather than burying it in appendices; and they include a clear recommendation for what the board is being asked to decide.