Topic starter
23/06/2026 7:20 pm
TL;DR: As AI use cases scale faster than organisational controls, the core governance failure is not model quality alone but the gap between data, compliance and operational oversight, according to Collibra. Holistic AI governance matters because fragmented tooling turns risk management into a bottleneck instead of a control plane.
Editorial analysis by NHI Mgmt Group, based on content published by Collibra: “How to choose the right AI governance solution”.
Key questions
Q: How should organisations structure AI governance before focusing on compliance?
A: Start by defining ownership, risk tolerance, approval paths, data access boundaries, and monitoring responsibilities.
Q: Why do siloed AI governance tools create risk even when each team has a strong process?
A: Because risk emerges at the boundaries between processes, not only inside them.
Q: What are the signs that AI governance controls are not keeping pace with adoption?
A: Common warning signs include unclear ownership for AI use cases, inconsistent approval processes, limited visibility into where sensitive data enters models, and weak evidence for audits or assessments.
Practitioner guidance
- Unify AI use-case inventory Create one authoritative register for AI use cases, model cards, owners, and status so compliance, data, and engineering teams review the same record.
- Link lineage to approvals Require each AI initiative to carry data lineage, training inputs, and approval state together so reviewers can trace what was approved and on what evidence.
- Automate cross-functional routing Route intake through data, legal, risk, and technical reviewers automatically, with risk-based escalation for sensitive data or high-impact use cases.
Bottom line: AI governance fails when organisations split data stewardship, model operations, and compliance into separate tools and workflows.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
25/06/2026 3:18 am
AI governance silos create an evidence problem before they create a tooling problem: when data, model, and compliance teams operate in separate systems, each group sees only a partial control picture. That means governance decisions lose traceability, and the organisation can no longer prove that the same use case, dataset, and approval state are being reviewed end to end. The practitioner takeaway is that AI governance must be designed as a shared control plane, not a set of adjacent specialist tools.
A few things that frame the scale:
- Only 23% of IT leaders were very confident in their organisation's ability to manage security and governance for GenAI deployments, according to a 2025 Gartner survey of 360 IT leaders.
A question worth separating out:
A: Start with inventory and lineage, then automate the workflow that keeps those records current. Policy automation is only useful when the organisation already knows what it is governing and can tie each use case to evidence. Without that base, automated reviews will simply accelerate incomplete decisions.
👉 Read our full editorial: AI governance solutions fail when data, models and compliance stay siloed