In late 2023, most enterprises treated AI governance as a nice-to-have. By 2025, the EU AI Act was law, ISO 42001 had landed, and organisations without governance frameworks were scrambling. These eight posts track the governance conversation as it evolved from optional to urgent to operational. Read them if you're building an AI governance programme. Or if you're wondering why you should.
The Wake-Up Call
November 2023. ISO 42001 had just dropped. The EU AI Act was coming. And most enterprise AI initiatives were running without any governance framework at all. This was the post where we said it plainly: governance isn't optional, and the organisations that wait for regulation to force their hand will be the ones scrambling hardest.
Chapter 1 - Nov 2023. The starting gun.
AI Governance Is Not Optional
Article·8 min read
Regulation Lands
The EU AI Act became the world's first major AI regulation. Even if your organisation is based in New Zealand, if you have European customers, operations, or ambitions, it applies to you. This post breaks down what the Act requires and what NZ enterprises need to prepare for.
Chapter 2 - Aug 2024. The new rules.
The EU AI Act: What NZ Enterprises Should Know
Article·10 min read
Start with Data
You can't govern AI outputs without governing data inputs. This is the most overlooked principle in AI governance. Data classification, lineage tracking, quality monitoring, and access controls form the foundation. Everything else builds on top.
Chapter 3 - Sep 2024. The foundation.
Why AI Governance Starts with Your Data
Article·7 min read
Building from Zero
Most enterprises we work with are starting from scratch. No AI policy. No risk classification. No monitoring. This post provides the practical starting point: policy templates, risk tiers, team structure, and the minimum viable governance framework that satisfies regulators without paralysing delivery.
Chapter 4 - Sep 2024. The practical guide.
How to Build AI Governance from Scratch
Guide·13 min read
The NZ Context
New Zealand's regulatory approach to AI is evolving. The Privacy Act applies. The Public Service Commission has guidelines. But the regulatory framework is lighter than Europe's, which creates both opportunity and risk. What NZ boards and leadership teams need to understand about governing AI responsibly in our market.
Chapter 5 - Oct 2024. The local angle.
AI Governance for NZ Enterprises: What Boards Need to Know
Article·9 min read
The Implementation Gap
By early 2025, most enterprises had an AI policy. Few had operationalised it. The gap between "we have a policy" and "our teams follow the policy" is where real risk lives. This post maps the common implementation failures and the structures that actually close the gap.
Chapter 6 - Mar 2025. Policy vs practice.
The Governance Gap: Between Policy and Practice
Article·10 min read
Ethics in Production
Responsible AI is easy to talk about and hard to build. Moving from ethics documents to operational practices requires specific design patterns: bias monitoring, explainability requirements, human oversight mechanisms, and the willingness to shut down a system that isn't performing ethically. What responsible AI looks like when you're actually shipping.
Chapter 7 - Apr 2025. Making it real.
Responsible AI in Practice, Not Just Policy
Article·7 min read
Lessons from the First Wave
Eighteen months of enterprise AI governance in practice. What worked: starting with data governance, building monitoring before deployment, creating clear escalation paths. What didn't: governance committees that meet quarterly, policies that nobody reads, risk classifications that don't map to real decisions. Honest lessons from the organisations that went first.
Chapter 8 - Sep 2025. The retrospective.
AI Governance: Lessons from the First Wave
Article·9 min read
Why This Series Exists
AI governance isn't exciting. It doesn't demo well. It doesn't generate LinkedIn engagement. But it's the thing that determines whether your AI programme survives contact with regulators, auditors, and the inevitable incident where something goes wrong. These eight posts give you the full arc from awareness to implementation. Skip it at your own risk.
The organisations that treated governance as an afterthought in 2023 are the ones spending the most on it now. Every chapter in this series is cheaper than the alternative.
Isaac Rolfe
Managing Director