tgroenwals shared this post · Apr 27
Clare Kitching

AI risk isn’t where you think it is.

It’s not in the boardroom.
It’s not in the policy document.

It’s in the everyday decisions no one sees.

A prompt typed into a tool.
A file uploaded with best intentions but without thinking it through.
A shortcut taken to save time.
That’s where things go wrong.

Most organisations focus on governance first.
And that makes sense.

But governance alone doesn’t change behaviour.

What works is building guardrails into how work gets done.

Four layers matter:
1/ Governance
Who owns the risk and what is acceptable

2/ Operating model
How teams are expected to use AI day to day

3/ Process
Where checks, reviews and escalation happen

4/ System
What the technology allows or blocks by default

You can write perfect policies and still have zero control.
Because people follow paths of least resistance.
If the safe way is too hard, they won’t use it.

So don’t just set rules, start redesigning how work happens.

Are you designing for compliance
or designing for real behaviour?

♻️ Repost to help someone get ahead of AI risk.
🔔 Follow Clare Kitching for insights on unlocking value with data & AI.
💎 Get more from me with my free newsletter here: https://lnkd.in/ghBtk6jR

356
Amit Gandhi The system layer is where governance either becomes real or stays theoretical. Filters, validation, default controls built into the technology, that's what governs behaviour at scale when no one is watching. Relying on people alone to enforce policy is a design choice that assumes everyone reads, remembers, and applies it under time pressure, but not really a reasonable assumption. Apr 26 2 likes
Paul Souhuwat A useful reframing Clare.

As AI accelerates how quickly answers are produced, the real challenge becomes maintaining decision discipline—knowing when to trust, when to verify, and where human judgment must remain.

Without that, speed can quietly amplify risk rather than reduce it.
Apr 26 1 like