IoD AI Governance Report: Help Is On The Way... PS Stop the Shadow Adoption!

IoD AI Governance Report: Stop the Shadow Adoption!Hi and thanks for listening, it’s Danny here and on this week's AI Moment, Jonathan and I are tackling a seriously important document: the IoD Governance in the Boardroom AI Report. The episode is a little denser than usual, so it is worth subscribing to our newsletter (we send out a newsletter with every pod) where we dived a little deeper and shared an executive briefing. The Full Report Is Available Here https://www.iod.com/app/uploads/2025/06/IoD-AI-Governance-in-the-Boardroom-1-7f341cd46a780f216ad68d88d4cddc8f.pdf   or on our newsletter https://aimomentpodcast.substack.com/It might sound a bit heavy, but this 34-page guide, released in September, is essential reading for every UK business leader. We’ve broken down the key warnings and opportunities into simple, bite-sized chunks.The core message I took away is that adoption is running ahead of governance. We see individuals and teams adopting powerful tools like Gemini and ChatGPT—what we call ‘Shadow AI’—without the necessary strategic oversight. The IoD report makes it clear: if you want to scale AI safely, you must get a handle on this now. (For a deeper dive, check out our previous episodes on Shadow AI and our AI Manifesto—links below!).We also discussed the regulatory complexity facing UK firms. Since we don't have a single, unified AI Act, businesses must navigate dual compliance between UK regulators and the risk-based EU AI Act. If your data or cloud systems (like Salesforce) touch the EU, you need a proactive strategy to avoid falling foul of both.For me, the key to trust lies in the data. The report stresses the 'Holy Trinity': lineage, quality, and permissions. If you can't prove where your data came from, you simply shouldn't be running the experiment. This isn't just an IT problem; it's an enterprise-wide initiative that requires the board's full attention.Finally, we noted the new ISO 42001 standard for AI management. I know, another standard, but it provides the essential framework for risk assessment and control.We’ve put a direct link to the IoD report below, and I plan to use NotebookLM to create an executive briefing to save you the 34-page read! Thanks for listening, and don't forget to subscribe and check out our newsletter at aimoments.co.uk.