From Chicago.
For the AI era.

Listen now

← All topics

Topic

AI Governance & Risk

How boards, executives, and counsel put responsible AI into practice — governance frameworks, board AI oversight, D&O liability, risk management, and the controls that let organizations scale AI safely. Conversations and analysis from the leaders building the guardrails.

What "AI governance and risk" really means

AI governance and risk is the discipline of deploying artificial intelligence so that an organization can move quickly and stay accountable — covering how AI systems are reviewed before launch, how risk is tiered, who oversees outputs, and how responsibility is assigned when something goes wrong. It is the operating tension at the center of this show: velocity versus accountability.

Most coverage of this topic is either abstract principle ("be responsible") or dense legal reference. This hub is neither. It collects what senior operators — chief privacy officers, state CIOs, general counsel, finance and enterprise leaders — actually do to govern AI, in their own words, from the AI in Chicago interview archive. If you're responsible for getting AI into production without getting your organization into trouble, start here.

Start with the playbooks

Two evergreen guides distill the operator consensus across dozens of conversations:

The questions this hub answers

How do you govern AI without slowing the business down?

Treat governance as a GPS, not a roadblock. Bring legal, security, and privacy in at project inception, tier scrutiny to real impact, and let low-risk work move fast. See the governance playbook, anchored in NielsenIQ CPO Elena Vekilov's framework.

What foundations do you need before scaling AI?

Identity and access, data governance, and cybersecurity — the unglamorous infrastructure that the exciting use case sits on top of. Illinois State CIO Brandon Ragle makes the case from the scale of 13 million residents.

What should you actually measure?

Outcomes, not engagement. Reed Smith's Richard Robbins frames the real maturity test as whether you can govern a tool responsibly at scale — not whether you can launch it.

Who owns AI governance?

Not IT alone. It's a cross-functional business responsibility spanning legal, privacy, security, data, and the business line — a point Gianne James makes pointedly from financial services.

Are AI risk assessments political?

The inputs are. Northwestern's Nick Diakopoulos measured 42,853 news articles across 27 countries and found that which AI harms get covered varies with the political lean of the outlet — and that existential risk, the premise of every frontier-AI statute, accounts for just 7.2% of coverage. If your risk register inherits its priorities from public discourse, it inherits that sorting too.

Governance by sector

The principles are shared, but the stakes and specifics shift by industry. These conversations show governance under real constraints:

  • Enterprise & data — Elena Vekilov on risk tiering and privacy as infrastructure across 90+ markets
  • Public sector — Brandon Ragle on foundations-first governance at state scale
  • Law — Richard Robbins on effective, responsible AI use aligned to firm strategy
  • Finance — Gianne James on why AI governance can't live inside IT
  • Healthcare & sensitive data — Tim Turner on data-readiness, bias review, and human oversight

Where governance meets the law

Governance doesn't happen in a vacuum — it happens under a fast-moving regulatory regime, and Illinois is one of the most active states in the country. For the policy and regulation side of this story — the notice regime, mental-health AI rules, and public-sector AI strategy — see the Illinois AI Policy hub and conversations with the people who wrote and enforce the rules, including Rep. Bob Morgan and policy advisor Jason Rosensweig.

Related topics

Frequently asked questions

What is AI governance?

AI governance is the set of practices — intake, risk-tiering, data controls, human oversight, contracts, and auditing — that determine which AI systems an organization deploys, how they're reviewed, and who is accountable for outcomes. Its purpose is to enable adoption safely rather than to prevent it.

What is the difference between AI governance and AI risk management?

Governance is the broader operating system (roles, policies, review processes, accountability); risk management is the part focused specifically on identifying, tiering, and mitigating potential harms. In practice, risk tiering is a core mechanism inside a governance program.

Is AI governance only an IT responsibility?

No. Operators consistently describe it as a cross-functional business responsibility shared across legal, privacy, security, data, and the business line, with a clear convening owner.

Episodes in this topic

Insights & analysis

Featured Conversation

What Illinois' State CIO Taught Me About Scaling AI Responsibly

Brandon Ragle, Illinois State CIO and Secretary of the Department of Innovation & Technology, leads 1,800+ technologists serving 13 million residents. His lesson for anyone adopting AI: the organizations getting it right aren't the fastest, they're the ones with the strongest foundations.

Khullani M. Abdullahi, JD · March 9, 2026 Read the story ↗