Notifications
Clear all
Topic starter
20/08/2026 5:33 pm
TL;DR: LLMs can worsen the digital divide, while automation without human oversight can amplify bias and context errors, according to Fiddler. Durable AI governance depends on accountability, documentation, and regular audits, including alignment with the NIST AI Risk Management Framework, and the governance problem is no longer model quality alone, but whether organisations can prove how decisions were tested, reviewed, and controlled.
NHIMG editorial — based on content published by Fiddler: Best Practices for Responsible AI
Questions worth separating out
Q: How should organisations govern AI systems that can make consequential decisions?
A: Organisations should govern consequential AI systems with the same discipline used for high-risk identities: defined ownership, least privilege, logging, approval boundaries, and human override.
Q: How do organisations keep human oversight meaningful in AI workflows?
A: Human oversight stays meaningful only when humans have enough context, time, and authority to intervene.
Q: What do organisations get wrong about governing AI use?
A: They often separate AI governance from IAM and lifecycle management, even though AI adoption depends on who can access tools, what data those tools can reach, and how access ends.
Practitioner guidance
- Define AI decision ownership Assign a named executive owner for each material AI system, including moderation, triage, or approval workflows, so accountability is never diffuse.
- Build human review thresholds Set explicit triggers for human intervention when AI outputs affect user trust, policy enforcement, or sensitive operational decisions.
- Create audit-ready AI documentation Record testing methods, approval dates, model limitations, and monitoring outcomes so governance evidence exists throughout the system lifecycle.
What's in the full article
Fiddler's full blog post covers the panel discussion details this post intentionally leaves for the source:
- Direct commentary from the panel on how language bias and hallucinations affect global AI access
- Practical examples of how moderation teams can balance automation with human oversight
- The panel's discussion of internal accountability, documentation, and regular audits for responsible AI
- The link between NIST AI RMF guidance and operational AI governance practices
👉 Read Fiddler's summary of responsible AI best practices for generative AI →
Responsible AI governance: what controls are teams missing now?
Explore further
20/08/2026 6:19 pm
Responsible AI is becoming a governance discipline, not a model-only discipline. The article shows that accuracy, fairness, and accountability cannot be treated as separate concerns because they fail together when systems are deployed without reviewable controls. The practical consequence is that AI governance now belongs alongside security governance, not outside it. For programmes that already manage IAM, PAM, or NHI risk, the lesson is that automated decisions need the same control discipline as privileged actions.
A question worth separating out:
Q: How do security teams know if AI governance is working?
A: Look for evidence that access decisions are reviewable, permissions are revocable, and exceptions are not becoming permanent. If the team cannot explain who owns an AI workflow, what it can reach, and when its access was last reviewed, governance is incomplete. Control maturity shows up in traceability, not adoption volume.
👉 Read our full editorial: Responsible AI governance needs auditability, oversight, and accountability
