The End of AI Governance as a Separate Discipline
AI Governance is everywhere. AI Committees. AI Councils. AI Registries. AI Policies. AI Risk Assessments. Every organisation seems to be creating a dedicated structure to govern AI.
And perhaps that is exactly what is needed today.
But I cannot help but wonder whether we are designing for the future or reacting to the present. Because if we follow the current trajectory to its logical conclusion, AI Governance as a separate discipline may eventually cease to exist.
Not because governance disappears. But because AI does. At least as a distinct capability.
Today, we talk about AI-enabled systems. AI-enabled customer service. AI-enabled incident management. AI-enabled reporting. AI-enabled software development. AI-enabled decision support. The wording itself suggests that AI is an additional capability being attached to existing systems. Something special. Something separate. Something that requires dedicated attention.
History suggests otherwise.
There was a time when organisations discussed internet-enabled applications. There was a time when cloud-enabled applications were considered unique. There was a time when mobile-enabled services were viewed as strategic differentiators. Today they are simply applications. The capability became embedded. The distinction disappeared. AI may be following the same path.
If every system contains AI, then eventually the question becomes meaningless.
Does the CRM contain AI? Probably.
Does the service management platform contain AI? Probably.
Does the data platform contain AI? Probably.
Does the reporting tool contain AI? Probably.
Does the collaboration platform contain AI? Probably.
At that point, asking whether a system contains AI becomes as useful as asking whether a system contains software. Of course it does. The real question becomes something else.
Many organisations are currently asking: “How do we govern AI?” I believe the more important question is: “What does governance look like when AI is everywhere?” Because the answer cannot be to create a parallel organisation forever.
We cannot create:
- Security and AI Security
- Risk and AI Risk
- Governance and AI Governance
- Architecture and AI Architecture
for every capability that evolves. The organisational overhead alone becomes unsustainable.
Instead, existing disciplines must evolve. Security does not stop being Security because AI exists. It still asks whether information is adequately protected. Risk does not stop being Risk because AI exists. It still asks whether the organisation is comfortable with the consequences of its decisions.
Data Governance does not stop being Data Governance because AI exists. It still asks whether data is appropriate for the intended purpose. The questions evolve. The disciplines remain.
This is where I believe many organisations are making a subtle mistake. They are treating AI Governance as a destination. I view it as a transition. A capability designed to help organisations adapt to a world where AI becomes increasingly embedded in everyday operations.
The objective should not be to build a permanent AI Governance empire. The objective should be to ensure that existing governance disciplines evolve sufficiently to operate in an AI-enabled world.
This idea is not unique to AI. I made a similar argument when discussing Data Ownership. When data ownership works, Data Owners should disappear. Not because ownership is unimportant. But because ownership becomes embedded in normal business behaviour. The role exists because the capability is immature. The role becomes less visible as the capability matures.
I believe AI Governance may follow a similar path.
The most successful AI Governance programme may ultimately be the one that disappears. Not because governance failed. But because AI ceased to require special treatment. Security absorbed it. Risk absorbed it. Architecture absorbed it. Data Governance absorbed it. The controls remain. The accountability remains. The oversight remains. Only the label disappears.
Perhaps that is the future state we should be designing for. Not a world where AI Governance becomes larger and larger. But a world where AI becomes so deeply embedded in how organisations operate that AI Governance becomes indistinguishable from Governance itself.
And when that happens, we may finally stop asking: “How do we govern AI?” And start asking:
“Are our governance disciplines ready for a world where AI is no longer explicit, but simply expected?”