AI Governance Institute
← News
Research2026-05-26

Global AI Governance Needs Proactive, Adaptive Frameworks, ITU Report Finds

Source

The Annual AI Governance Report 2025: Steering the Future of AI

International Telecommunication Union

What happened

The International Telecommunication Union published the Annual AI Governance Report 2025: Steering the Future of AI in January 2025, providing a structured assessment of the global AI governance landscape across multiple jurisdictions and international standards bodies. The report synthesizes developments from organizations including the OECD, ISO, and various UN agencies, with a particular focus on how governance mechanisms can keep pace with accelerating AI deployment. While the document does not impose direct compliance obligations on enterprises, it functions as an authoritative reference for how international bodies are converging on shared governance expectations. The ITU, as a specialized UN agency with 193 member states, carries significant weight in shaping national-level regulatory approaches, especially in jurisdictions that look to multilateral institutions for policy direction. A central theme of the report is that governance must be proactive rather than reactive, anticipating risks from foundation models, generative AI systems, and cross-border data flows, consistent with a broader international trend toward risk-tiered, lifecycle-based governance models already reflected in ISO/IEC 42001 and the NIST AI Risk Management Framework.

Why it matters

  • ·Regulatory exposure: Organizations operating across multiple jurisdictions may face indirect compliance obligations if national legislatures or procurement authorities incorporate ITU report recommendations into domestic AI legislation or vendor standards, particularly in markets that align policy with multilateral guidance.
  • ·Operational impact: The report's emphasis on adaptive, lifecycle-based governance signals that regulators globally will increasingly expect enterprises to maintain documented processes for continuously monitoring and adjusting AI systems throughout their operational lifespan, raising the bar for AI risk management programs.
  • ·Organizational risk: The report's identification of governance gaps in algorithmic accountability, AI-generated content, and compute access suggests that these areas are likely targets for future regulatory scrutiny, meaning organizations without mature controls in these domains face elevated exposure as international consensus solidifies.

Governance controls affected

CHM-001AI Model Version ControlCMP-001Multi-Jurisdiction AI Regulatory Compliance MappingDGC-004AI Output Retention and DeletionHOC-001AI System Risk ClassificationMON-003AI Bias and Fairness MonitoringMON-005Continuous Model Evaluation

What to do now

  • ☐Incorporate the ITU Annual AI Governance Report 2025 as a reference document in your AI risk register review cycle and flag its priority themes for gap analysis against existing controls.
  • ☐Map your current AI governance framework against the lifecycle-based and adaptive governance expectations articulated in the report, identifying where monitoring, adjustment, and documentation processes fall short.
  • ☐Assign legal and government affairs teams to track whether ITU report recommendations are referenced in upcoming national AI legislation or public procurement standards in jurisdictions where your organization operates.
  • ☐Review your algorithmic accountability and AI-generated content governance posture in light of the report's characterization of these areas as significant governance gaps warranting near-term regulatory attention.
  • ☐Update cross-border AI deployment documentation to address how your governance program handles jurisdictions that derive policy direction from multilateral bodies such as the ITU and OECD.

What to watch next

Compliance teams should monitor whether ITU member states, particularly those in the Global South that rely heavily on multilateral frameworks, begin referencing the 2025 report in draft AI legislation or national AI strategies over the coming 12 to 18 months. Developments within ISO/IEC JTC 1/SC 42 and OECD AI Policy Observatory updates should also be tracked, as the report signals continued convergence between these bodies and ITU guidance. Teams should watch for any ITU follow-on working group outputs or supplementary guidance documents that translate the report's recommendations into more operationally specific requirements for member state adoption.

Stay ahead of stories like this

Get every ISO/OECD/UN AI governance development like this one, plus the rest of the week's developments. Every Thursday.

Powered by Buttondown.

Related Coverage

Research2026-08-24

PwC India Sets Board-Approved Risk Appetite as the Anchor for AI Model Governance

PwC India published guidance titled 'Governing models in the AI era' recommending that organizations establish board-approved AI model risk appetite thresholds, build complete model inventories with ownership and validation metadata, and apply AI-specific due diligence to third-party solutions. The guidance addresses a persistent implementation gap: most enterprises have neither a formal definition of what counts as a model nor a complete register of model-like tools in production. Compliance teams can adopt the framework as a practical operating model for cataloguing AI systems and governing external vendors.

Research2026-09-03

ISO 42001 Implementation Gap Exposed: Clause-by-Clause Guide Sets Audit Baseline

enz.ai has published a detailed implementation guide for ISO/IEC 42001:2023, covering each clause of the standard from scoping and leadership through internal audit and Annex A control mapping. The guide gives compliance teams a structured path for standing up a conformant AI management system before pursuing formal certification. Organizations facing regulatory expectations of structured AI governance can use the guidance to assess and close readiness gaps.

Research2026-09-01

SR 26-2 Forces Banks to Rethink Model Governance From Inventory to Board Oversight

The OCC and Federal Reserve's revised model risk management guidance, SR 26-2, resets supervisory expectations for U.S. banks by shifting to a materiality-based approach that covers both traditional statistical models and AI systems, replacing the SR 11-7 framework that had governed bank model governance since 2011. Practitioner analysis from CRA identifies four areas banks must redesign: inventory scope, model tiering, validation independence, and governance alignment up to the board. A companion implementation guide from Lumenova AI adds concrete steps, including inventory rationalization and a distinct governance lane for agentic and generative AI, while a proposed academic framework maps a six-layer control architecture for bringing GenAI systems into SR 26-2 scope. Banks that still run AI governance and model risk management as separate programs face the most immediate pressure to harmonize them.