Businesses Move Toward Unified Digital Governance

Complex technology, tighter regulation and rising geopolitical risks are prompting business leaders to rethink digital governance, according to IAPP’s Digital Risk Report, published last week. The report draws on survey data, interviews with senior leaders and analysis of securities filings. IAPP says organizations are streamlining processes and structures into a defined governance framework to manage risks while benefiting from technology such as AI. Joe Jones, IAPP’s director of research and insights, told CIO Dive that technology regulations and risks overlap, requiring a more coordinated approach.

AI governance programs remain immature: only 27% of companies said their programs were fully mature, according to a Schellman report. The report found organizations struggle to establish policies and oversight at the pace of AI adoption. IAPP also identified a shortage of qualified personnel as a barrier. It warned that gaps in staffing can leave organizations unable to develop, manage and audit systems in a legally compliant way as demand for innovation outpaces internal capacity.

Organizations moving toward aligned governance often form committees with representatives from different business areas and disciplines. Jones cautioned that overlapping or competing committees can create “death by committee.” Companies are also seeking to bring privacy, AI governance and security under a broader digital risk framework with clear leadership and reporting lines. Jones said the framework should address conflicts such as privacy’s data minimization requirements and AI’s need for more data. A Gartner report says adaptable, proportional governance frameworks will be critical for deploying AI agents; agents will need different permission and autonomy levels to prevent project failures.

Complex technology, tighter regulation and rising geopolitical risks are prompting business leaders to rethink digital governance, according to IAPP’s Digital Risk Report, published last week. The report draws on survey data, interviews with senior leaders and analysis of securities filings. IAPP says organizations are streamlining processes and structures into a defined governance framework to manage risks while benefiting from technology such as AI. Joe Jones, IAPP’s director of research and insights, told CIO Dive that technology regulations and risks overlap, requiring a more coordinated approach.

AI governance programs remain immature: only 27% of companies said their programs were fully mature, according to a Schellman report. The report found organizations struggle to establish policies and oversight at the pace of AI adoption. IAPP also identified a shortage of qualified personnel as a barrier. It warned that gaps in staffing can leave organizations unable to develop, manage and audit systems in a legally compliant way as demand for innovation outpaces internal capacity.

Organizations moving toward aligned governance often form committees with representatives from different business areas and disciplines. Jones cautioned that overlapping or competing committees can create “death by committee.” Companies are also seeking to bring privacy, AI governance and security under a broader digital risk framework with clear leadership and reporting lines. Jones said the framework should address conflicts such as privacy’s data minimization requirements and AI’s need for more data. A Gartner report says adaptable, proportional governance frameworks will be critical for deploying AI agents; agents will need different permission and autonomy levels to prevent project failures.