For boards and non-executive directors

AI oversight your board can prove

Education, workshops and independent advice that help directors oversee AI with confidence, from risk appetite to strategy and reporting.

Columbia Business SchoolOn-campus program available →
Board AI reportIllustrative
Quarterly
Example of a quarterly AI report for the board, showing registered AI systems, high-risk uses, incidents, pending board decisions and benefits against plan. Sample data.
Why now

The board carries the risk

€35m or 7%

of worldwide annual turnover, whichever is higher: the maximum fine for uses of AI the EU AI Act prohibits.

EU AI Act, Article 99(3)
Dec 2, 2027

High-risk uses of AI, such as recruitment and credit scoring, must meet the requirements of the EU AI Act.

Regulation (EU) 2026/1744
37%

of respondents attribute at least some EBIT impact to AI, while nearly nine in ten use it regularly. The board has to ask where the return is.

McKinsey, The state of AI in 2026
See all key dates →
Self-check

Six questions for every director

If the board cannot answer one of them, that is where to start.

  1. 01How do we govern our data and AI tool use?

    Without rules for data and tools, staff use AI in ways no one has approved.

  2. 02Do we know who approved each system?

    Accountability starts with a register of every AI system and who signed it off.

  3. 03What happens when something goes wrong?

    Limits and escalation agreed in advance decide how fast the company reacts.

  4. 04Do we keep proper audit trails?

    Regulators and auditors ask for evidence, not intentions.

  5. 05How do we respond to breaches of any kind?

    Incident handling has to be written down before the first incident.

  6. 06Can we keep our token use under control, who has access to what?

    AI costs and access grow quietly unless they are checked on every request.

The full scope

What governing AI takes

Six responsibilities that together make AI oversight work. Each one is covered by our services.

01Legal and regulatory compliance

Know what the law asks of the company, and what the board must be able to show.

What the board should have

An overview of the rules that apply to your AI systems

Covered by
02Risk appetite

Where the company will and will not use AI, and when a person decides.

What the board should have

An approved AI risk appetite statement

Covered by
03Strategy and investment

Judge management's AI plan and fund it one stage at a time.

What the board should have

A review checklist and a decision calendar

Covered by
04Assurance and audit trails

Records of who approved each system and what happened when something went wrong.

What the board should have

A register of AI systems and approval records

Covered by
05Reporting rhythm

A quarterly view of every AI project, its owner, the board's decision and the benefit it was funded to deliver.

What the board should have

A quarterly AI report

Covered by
06Board skills and evaluation

AI expertise in how the board assesses itself and plans succession.

What the board should have

A skills matrix with AI competencies

Covered by

Governing AI for Boards covers all six in three days. The two-day Board AI program covers responsibilities 1, 3, 4 and 5.

How we work

Oversight as a cycle

Good AI oversight repeats every year. We help the board set up each step, then keep it running.

Start at any step. Most boards begin by understanding where AI creates risk and opportunity; boards that already report on AI often start with an independent review.

  1. 01Understand

    See where AI creates risk and opportunity in your company

  2. 02Set limits

    Agree the risk appetite and the rules people follow

  3. 03Organize oversight

    Decide who decides what, and what the board receives

  4. 04Review and fund

    Judge management's plan and fund it in stages

  5. 05Monitor and report

    Follow every AI project and its results each quarter

  6. 06Evaluate and renew

    Test what works, and update skills and controls

↻ And again next year

All board services

From first session to ongoing advice

Every step stands on its own and leads to the next.

2Build
One to two days

You leave withA way to judge and fund AI, and the board's AI agenda

3Master
Three days

You leave withThe full oversight approach and a 90-day plan

4Assure and advise
Weeks to ongoing

You leave withAn independent opinion, then an advisor at hand

  • Education
  • Workshop
  • Advisory
Recommended first steps

Start with half a day

Also for boards:Your industry in 2030 →AI agents and your organization →Responsible AI policy →

Board education

Build lasting board capability

Choose single modules, combine them into the two-day Board AI program, or take the three-day program with your whole board, at Columbia Business School or on site.

2 days

Board AI program

Core goalsCover AI risks and opportunities, governance and oversight of strategy, and set the board's AI agenda for the year.

Take-home value

One shared understanding of AI across the board, and one way to oversee it.

Learn more →

Also:AI governance framework →

Columbia Business School
In-company program

Three days, one board

Governing AI for Boards is a three-day in-company program for the members of one supervisory board, built around your own company: its revenue model, plans and AI systems, under strict confidentiality. About 70 percent of the time goes to governance and oversight. Directors practice the work in an incident simulation and a board meeting on a real AI proposal, and leave with an AI risk appetite and an oversight agenda for the next twelve months. At Columbia Business School in New York, where our founder teaches AI, or at a location of your choice.

About the program →
  1. 01Insight
  2. 02Judgment
  3. 03OversightBoard meeting on a real proposal
You leave with
  • Information protocol
  • Draft AI risk appetite
  • AI quarterly dashboard
  • Oversight agenda for twelve months
Ways to take part
On campusYour board at Columbia Business School in New York.
On siteAt your company, or at another location of your choice.
Independent advice

Stay in control

An independent review shows where you stand today. An advisor at the board's side keeps oversight sharp every quarter.

AI Governance review
  1. Inventory
  2. Test
  3. Written opinion
Board AI Advisor Every quarter
  1. Prepare
  2. Advise
  3. Report
Ongoing, quarterly

Board AI Advisor

Core goalsGive the board an independent view on management's AI plans, prepare quarterly sessions and contribute to strategy days.

Take-home value

A board that oversees AI with its own expert at hand.

Learn more →

The board oversight pack

Six documents a committee can table and an auditor can test. Delivered with the AI Governance review.

Request an example of the pack →
  • Register of every AI system in use
  • Map of AI uses by risk level
  • AI policies
  • Board reporting template
  • Performance and risk indicators
  • Assessment of where you stand today
Turn policies into rules that run on every AI request: the Tailored AI Gateway
EU AI Act

Key dates for boards

Dates as amended in 2026 by Regulation (EU) 2026/1744. Which rules apply depends on how your company uses AI and how risky that use is, so we check every date against your own AI systems before it goes into a board paper.

  1. Feb 2, 2025 Banned uses of AI

    Some uses of AI are prohibited.

    In force
  2. Aug 2, 2025 Rules for general-purpose AI

    Duties for the companies that provide general-purpose AI models.

    In force
  3. Aug 2, 2026 Most other rules

    Including telling people when they deal with AI or with content made by AI.

    In force
  4. Dec 2, 2027 High-risk uses of AI

    Such as recruitment, credit scoring and access to essential services.

    Prepare now
  5. Aug 2, 2028 AI in regulated products

    Such as medical devices, machinery and toys.

    Prepare now

Related rules and standardsISO/IEC 42001NIST AI Risk Management FrameworkGDPR: automated decisions about peopleDutch Corporate Governance Code

Tools

Tools for the board

The same tools we use with clients, so the board can see where AI stands and follow every decision.

Questions directors ask

  • Do directors need technical knowledge?

    No. Every session is pitched at judgment: what to ask, what to require and how to recognize a good answer. Technical detail stays with management.

  • Can our executive team join?

    Yes. Several workshops run as joint sessions of the board and the executive team, such as AI risk appetite and Your industry in 2030. In board education, the CEO and CFO can join selected parts.

  • Is what we share confidential?

    Yes. Everything you share stays confidential and is used only for your own session or engagement.

  • Can we combine modules?

    Yes. The three board modules combine into the two-day Board AI program, and every module points to a logical next step.

  • Do you replace our legal advisers?

    No. We help the board understand and oversee AI. Where legal interpretation is needed, we work alongside your legal counsel.

Start the board conversation

Tell us where your board stands on AI. We suggest the right first step in the first conversation.

Looking for your executive team? For Executives →