AI adoption “outpacing Board oversight” states Chartered Governance Institute

Drawing on evidence from Governance professionals across the corporate, public, charity and education sectors, the research details broad agreement that AI adoption is advancing faster than organisations’ ability to govern it effectively. The study combined 16 cross-sector round tables involving 61 participants with survey responses from around 100 governance professionals. 

The findings come amid renewed scrutiny of AI safety and control. Current and former researchers at AI company Anthropic have recently raised concerns about the development of increasingly capable AI systems, while Anthropic has separately published an assessment of four incidents in which Claude models gained unauthorised access to real third party systems during cyber security testing procedures. 

The findings show that AI is now widely used across organisations for activities ranging from reporting and analysis to compliance and governance processes. However, many Boards lack clear visibility over how AI is being used across their organisations, particularly so where adoption is taking place informally outside approved governance processes. The report notes that shadow AI use occurs at least occasionally in most of those organisations surveyed. 

Further, the report suggests that many organisations are using AI without the governance frameworks, assurance mechanisms and oversight capability needed to govern it effectively. Formal governance infrastructure remains limited, including frameworks for evaluating pilots, measuring how AI is scaled and establishing clear accountability.

Board-level responsibility 

As AI becomes increasingly embedded in organisational decision-making, responsibility remains firmly with Boards of Directors and senior leaders. 

The research has identified a growing gap between operational adoption and governance maturity. While AI usage is becoming routine across many functions, formal AI governance structures remain underdeveloped. 

This takes on a particular importance as AI systems become more autonomous. The report warns that emerging agentic and semi-autonomous systems, capable of initiating actions with reduced human input, will require clearer escalation protocols, stronger controls and explicit accountability structures.

The research also identified a significant capability gap. Although awareness of AI among Boards is relatively high, practical competence remains limited. Training received by respondents was weighted heavily towards basic awareness, while its average effectiveness rating for preparing individuals to challenge AI outputs and integrate them into governance processes was just 2.4 out of five. 

Respondents strongly support moving beyond basic awareness towards practical Board-level competence. Almost 75% of them support making AI literacy a mandatory component of director induction and ongoing professional development.

*Read the Chartered Governance Institute UK and Ireland research

Broad agreeement 

Dr Valentina Dotto, policy advisor at The Chartered Governance Institute UK and Ireland and author of the new report, said: “Our research found broad agreement across sectors that AI adoption is advancing faster than organisations’ ability to govern it effectively.” 

Dotto continued: “Many Boards recognise the opportunities AI presents, yet they often have limited visibility over how these systems are being used across their organisations. Governance frameworks, oversight structures and Board capability are simply not developing at the same pace as adoption.” 

Further, Dotto asserted: “Boards need clear oversight of where AI is being used, how decisions are being influenced and what controls are in place to ensure outcomes remain explainable and accountable.” 

The in-depth report argues that governance is increasingly shifting from reviewing individual outputs towards overseeing the systems that generate and influence them. This places greater emphasis on transparency, auditability, assurance and organisational controls.

Strengthening visibility 

The Chartered Governance Institute UK and Ireland is calling on organisations to strengthen visibility over AI use, embed AI within governance and risk frameworks, improve Board oversight capability and ensure accountability remains clear wherever and whenever AI is deployed.

The report provides a practical governance framework covering accountability, control, capability and assurance, while proceeding to recommend that organisations consider AI across the full system lifecycle: from procurement and deployment through to monitoring and retirement. 

As AI becomes more deeply integrated into governance, compliance and reporting activities, The Chartered Governance Institute UK and Ireland argues strongly that organisations should immediately approach AI as a governance issue requiring Board oversight and organisational accountability.

*Further information is available online at www.cgi.org.uk