Forum Discussion
Organisational vs model-level AI governance — where's the real gap?
Most AI governance conversations I'm seeing focus on model-level controls, like bias testing and prompt injection defence. These matter enormously for individual AI systems. But I'd argue the bi...
Agree it's the organisational layer first – and the most basic question in your list, "what AI tools are actually being used", is where most SMEs stall, because Purview and Defender for Cloud Apps assume E5 licensing they don't have. What we see working for smaller organisations: start with a plain inventory per PC, assign an owner per tool, then classify under the AI Act. The technical controls come after.
(I'm with OneSecure – we made a free Windows app for that first inventory step, if useful: https://apps.microsoft.com/detail/9MWWCBH2L45C?cid=forum_mstc_governance)