Topic

Enterprise Risk Management

Enterprise risk management is a systematic approach to identifying, assessing, and mitigating risks across an entire organization that could affect strategic objectives and financial performance. In the context of AI governance, ERM frameworks help companies manage AI-specific risks including model bias, data privacy breaches, regulatory non-compliance, and unintended algorithmic harms. Effective ERM integration ensures that AI deployment decisions align with overall business risk tolerance and enables organizations to demonstrate to regulators, auditors, and stakeholders that AI systems are being managed with appropriate safeguards and oversight.

1 item

Corporate PolicyUS2026-05-03

Boards Urged to Overhaul AI Oversight as Deepfakes, Data Leaks Expose Governance Gaps, NACD Warns

The National Association of Corporate Directors (NACD) published guidance in January 2025 urging U.S. corporate boards to refine existing oversight mechanisms to address AI-specific governance failures. The guidance cites real-world incidents involving AI-generated deepfakes, confidential data leaks, and algorithmic bias as evidence that current board structures are inadequate for AI risk. NACD identifies a cross-functional leadership model as central to effective AI governance, placing the Chief AI Officer in coordination with the Chief Risk Officer, Chief Compliance Officer, Chief Legal Officer, and Chief Data Officer. For enterprise compliance teams, the guidance signals growing boardroom pressure to formalize AI accountability chains and integrate AI risk into existing enterprise risk management frameworks. Compliance professionals should expect boards to request clearer reporting lines, defined AI risk tolerances, and documented incident response protocols as standard governance requirements.

NACD board oversight AI governance enterprise risk management Chief AI Officer accountability risk management deepfakes United States algorithmic bias