Writing on AI governance.

Practical thinking on the structure your organization needs to run AI well, with your own team at the wheel.

Guidance in your inbox.

Practical writing on AI governance, sent occasionally.

July 31, 2026

What a Good Governance Audit Actually Covers

If you've never commissioned a Governance Audit, it's hard to know what you're saying yes to. Here's what a good one actually does, and what you should walk away holding.

Read· 3 min

July 28, 2026

The First 30 Days: Where to Start Depends on Where You Are

There's no universal first step for AI governance. The right move in your first 30 days depends on which stage you're starting from. Start anywhere else and you build on sand.

Read· 3 min

July 21, 2026

How to Talk to Your Board About AI Risk Without the Hype

Your board is getting AI from two directions: it'll save us, it'll doom us. Both are hype. The way to brief them is to drop the noise and frame AI as a set of decisions you've made, or haven't.

Read· 3 min

July 17, 2026

Small Team, Same Risk

Governance sounds like a big-company problem. But a small team uses the same AI tools on the same client data, with fewer safeguards and no one whose job this is. The risk doesn't scale down.

Read· 3 min

July 10, 2026

"Is This AI Tool Safe?" Is the Wrong Question

Vetting an AI vendor's security feels like governance. It isn't. The safest tool on the market is still a leak if the wrong data goes in or it's used the wrong way.

Read· 3 min

July 7, 2026

The Employee Who's Already All-In on AI

Every company has one: the early adopter who's rebuilt half their job around AI. They're your clearest signal of what's possible and your biggest unmanaged risk. Don't waste either.

Read· 3 min

June 26, 2026

The 4 Stages of AI Governance Maturity

An AI governance maturity model in four stages: Scattered Exploration, Aware but Unstructured, Strategic and Governed, and Integrated and Adaptive. Find out which one you're actually in.

Read· 4 min

June 20, 2026

Who Owns AI at Your Company? If "Everyone," It's No One

Ask who owns how AI gets used at your company and the answer is usually a shrug, or "everyone." Both mean the same thing: no one. Ownership is the gap hiding inside "AI."

Read· 3 min

June 18, 2026

What's Safe to Paste Into ChatGPT?

What's actually safe to paste into ChatGPT at work? The honest answer for most companies: no one has decided. Here's the real test, and the decision behind it.

Read· 5 min

June 16, 2026

Most AI Policies Fail the Same Way

Most AI policies fail for the same reason: they're written once, filed, and never owned or followed. A policy nobody lives by isn't protection. It's false confidence.

Read· 3 min

June 14, 2026

The Real Cost of Not Deciding

Not deciding on AI governance feels free. No budget, no project, no disruption. It's actually the most expensive option you have, and the bill arrives where you're not looking.

Read· 3 min

June 12, 2026

"We're Being Careful With AI" Is Not a Strategy

Caution feels responsible. But caution without decisions is just delay, and the AI use in your company keeps happening while you wait. Careful is a posture, not a plan.

Read· 3 min

June 10, 2026

The Moment the Data Leaves

Pasting work into a chatbot takes about two seconds. In those two seconds the data leaves your company, and on most consumer tools, you can't get it back.

Read· 3 min

June 8, 2026

Nobody at Your Company Has Decided What's Allowed

Ask anyone on your team what they're allowed to do with AI and watch what happens. When the rule is unclear, people don't stop. They guess, and they guess in their own favour.

Read· 3 min

June 6, 2026

Shadow AI: Your Team Isn't Going Around the System. There Is No System

Shadow AI is every AI tool your team uses for work that no one approved or tracked. It isn't rare or rebellious. Your people found tools that help them do their jobs; nobody gave that use a legitimate home.

Read· 3 min

June 4, 2026

Every AI Rollout Comes Down to Three Decisions

AI adoption isn't one decision, it's three: what can go in, who owns the answer, and who's accountable when it's wrong. Most organizations have made none of them out loud.

Read· 4 min