Practical Governance for Enterprise AI
Tag
2 items
The Harvard Ethics Center published an analysis on November 1, 2025, examining the implications of America's AI Action Plan for businesses operating in an increasingly deregulated US AI environment. The analysis finds that the Action Plan shifts primary responsibility for AI risk management onto the private sector, reducing federal oversight in favor of innovation-led development. In response, the Harvard researchers introduce the Boundaries of Tolerance Framework, a structured approach designed to help organizations define and document the range of risks they consider acceptable in AI development and deployment. The framework is positioned as a corporate governance tool for filling the gap left by an immature regulatory landscape, urging companies to establish their own ethics and governance standards proactively. For enterprise compliance teams, this signals that internal risk tolerance documentation may increasingly serve as a de facto governance instrument in the absence of binding federal rules. Organizations subject to sector-specific oversight, such as financial services or healthcare, should assess how voluntary frameworks of this type interact with existing regulatory obligations.
Microsoft, Google DeepMind, and xAI have each signed formal agreements with CAISI—the Center for AI Standards and Innovation at NIST—granting the U.S. government pre-release access to frontier AI models for national security evaluation. The agreements extend a program that previously covered only Anthropic and OpenAI, and align with directives in America's AI Action Plan. Developers provide model versions with safety guardrails removed so government evaluators can probe for national security risks, including in classified testing environments. CAISI has already completed more than 40 such evaluations, including models not yet publicly available.
