A new McKinsey survey puts a number on the AI-in-the-boardroom gap: 80% of individual users feel more productive, only 6% of organizations can find it on the income statement. Plus: an independent audit challenges a frontier lab's own AI-incident report, a new AI securities-suit theory, and the governance habit that quietly loses institutional memory on AI risk.
Boards want a dollar figure attached to any AI ask, not a capability demo.
Lead with the two or three use cases proven to move revenue, cost, or speed before showing any technology.
If I asked your board for the dollar impact of your last AI investment, could you show a number or just a capability?
Lens: Executive orientation for prospects, partners, and clients: how to open an AI conversation in the language the board already speaks.. Prepared for external discussion and refreshed periodically (last refreshed September 2, 2026). Figures referenced from the NACD 2026 Governance Outlook (363 directors surveyed), The D&O Diary, McKinsey's 2026 State of AI, Gartner agentic-cost research, Bank Director conference proceedings, and current board AI governance research. Individual client and partner details have been omitted or generalized.
Lead every AI conversation with one of these, not with the technology itself.
Boards want a dollar figure attached to any AI ask, not a capability demo.
Lead with the two or three use cases proven to move revenue, cost, or speed before showing any technology.
If I asked your board for the dollar impact of your last AI investment, could you show a number or just a capability?
AI readiness before and after a deal, meaning data, people, and process, is board-level risk, not IT-level risk.
Frame AI adoption as an integration-risk reducer, the same discipline as M&A change management applied to AI.
When you last evaluated a deal, did AI readiness show up in due diligence or only after close?
Only about 25% of organizations deploying AI have board-level guardrails in place.
Position governance as the fast lane to board approval, not a brake on it.
Does your board have a standing answer for what your AI guardrails are, or does that get improvised each time it comes up?
Roughly 93% of AI projects still fail, and boards increasingly know the cause is business misalignment, not the technology.
Open with an alignment methodology covering training, org behavior, compliance, technology, and use cases before any product talk.
If your last AI initiative stalled, was it the technology that failed or the alignment around it?
AI cannot scale on bad data, and it is a quiet blocker to any AI investment ask.
Name data readiness as obstacle number one up front so it does not surface later as a stall tactic.
Has anyone actually assessed your data readiness before the AI conversation, or did the AI conversation come first?
Boards are pushing management to name which roles get compressed by AI in the next 12 to 18 months and show a reskilling plan with real numbers.
Come with a named-roles-and-numbers framing ready, even before the client asks.
If your board asked which roles AI compresses in the next 18 months, could management answer with names and numbers today?
Boards want a named accountable owner when an AI system gets something wrong, not a shared-responsibility shrug.
Have a one-line answer ready for who is accountable if this is wrong.
If your AI system got something wrong tomorrow, could you name the one person accountable, or would it be a group shrug?
Directors at three major public companies, Microsoft, Adobe, and Nvidia, have been personally sued in 2026 over AI-related risks their boards allegedly knew about and did not act on. D&O insurers are starting to discuss carving AI-related claims out of standard coverage.
Turn readiness as fiduciary duty from a hypothetical into a concrete, current example, then ask whether the client's own D&O policy has kept pace with AI-specific risk.
Has your board's D&O policy actually been reviewed for AI-specific exclusions, or is everyone assuming it is covered?
Source: The D&O Diary
The standard that holds up to a regulator, an auditor, or a board is verified remediation, not a closed ticket.
Give clients a concrete, board-defensible bar for AI risk remediation instead of a vague governance promise.
If a regulator asked to see proof your last AI risk was actually fixed and not just marked closed, what would you show them?
Most carriers are now explicitly excluding AI from coverage; if a company delivers AI-touched work to customers, its ordinary Tech E&O and professional liability policies very likely exclude the AI claim.
Ask whether anyone has actually read the AI exclusion language in the current policy; most boards have never been shown it.
Has anyone on your team actually read the AI exclusion language in your current liability policy?
Boards are often setting AI timelines from conference sessions rather than operational ground truth; an informal poll of about 20 banks and credit unions found 15 of 20 had not deployed Copilot organization-wide.
Start by establishing what is actually deployed today; the gap itself is usually the most persuasive slide in the deck.
If your board asked what is actually deployed today versus what was promised at the last industry conference, would the numbers match?
Within roughly seven years, much of the institutional and tacit knowledge in many organizations retires, and AI can absorb what a person produced but not the judgment to tell whether the model got it right.
Invert the usual board question: instead of which roles AI compresses, ask whose judgment leaves in the next five years and whether anyone has captured it yet.
If your most experienced person retired tomorrow, has anyone captured what they know, or just what they produced?
An ISO 42001 certificate says something real about how an organization manages AI, and very little about what its agents can do at runtime.
Ask whether the client's AI policy contains a single condition that would actually halt a deployment, and whether it has ever been tested.
Does your AI policy contain a single condition that would actually halt a deployment, and has it ever been tested?
New this edition
In 2026, for the first time on an incident like this, independent researchers published their own report on a frontier AI security incident alongside the developer's own account, and the two did not fully agree on what happened.
Build a board exercise: hand the room both accounts and ask which one they would trust to run their own incident review, and why.
If an outside reviewer read your own AI incident report, would they find what they needed to check your reasoning, or just your conclusion?
New this edition
A 2026 securities suit against a major public technology company, one of nearly twenty AI-related securities suits filed this year, turns on describing an AI risk as hypothetical after the underlying conduct had already occurred.
Pull the client's own AI risk-factor language from the last investor deck and check, line by line, whether any of it describes something that has already happened.
When your last investor materials described an AI-related risk as something that could happen, did anyone check whether it already had?
New this edition
A prolonged governance-role vacancy does not by itself create director liability, but it fragments the institutional memory that lets a board show it actually followed through on emerging risks.
Hand the room a sanitized set of board minutes and have them find the dropped thread: the AI risk question raised and never actually closed.
Who in your organization owns connecting last quarter's AI risk questions to this quarter's answers, and could they produce that trail if asked?
New this edition
A major 2026 global survey found 80% of individual AI users report being more productive, while only 6% of organizations attribute significant earnings impact to AI, and the difference is workflow redesign, not budget or model choice.
Lead with the 6% number before any product talk; it reframes the conversation from what can it do to what would it take for us to be in the 6%.
If I asked your board what percentage of your AI initiatives has actually moved EBITDA, would anyone have a number ready?
Security and legal rarely show up as the stated reason a deal stalls. They show up as the silent veto.
Rarely voiced as an outright no. It shows up as a quiet veto from security or IT.
Bring a cyber lead for five minutes, anchored to a recognizable, risk-based standard.
Has security ever quietly killed an AI initiative at your company without it ever being called a no?
Functions as an emotional barrier more than a technical one.
Pre-brief legal counsel before the pitch, and lead with the fact that this is already backed from a legal and cybersecurity compliance perspective.
Is legal in the room before the AI pitch starts, or only after something goes wrong?
The room perceived as most sophisticated is often the least informed on AI specifics.
Offer board education as an add-on, never a requirement, delivered in one hour inside the board's existing cadence.
When AI last came up in a board meeting, was the room informed enough to ask the right follow-up questions?
Deals sold to middle management stall with no guarantee of C-suite or board alignment.
Maintain a monthly executive touchpoint with whoever signed, and offer to brief the board directly.
Does your board actually know about the AI initiative your team signed off on last quarter?
Security teams shutting down unsanctioned AI tools signals unresolved governance anxiety that eventually reaches the board.
Check in regularly on what leadership is hearing in security and compliance reviews so nothing surprises the boardroom later.
If IT shut down an employee's AI tool tomorrow, would your board hear about it before or after it became a bigger story?
Executives who find an AI proposal compelling but unfamiliar often reach for insurance, cyber, and legal together and stop there, frequently standing in for unfamiliarity rather than a specific finding.
Name the three concerns before the client does, and bring a named specialist for each, five minutes apiece, offered rather than required.
When your team said you need insurance, cyber, and legal to sign off, had anyone actually named what they were checking for?
Board members are now being sued personally over AI risk their companies allegedly knew about, and D&O insurers are beginning to discuss coverage carve-outs for AI claims. Seven boardroom topics AI keeps raising, five objections that quietly stall AI initiatives, and what changed this week: board liability just became concrete.
AI Boardroom DiscussionsWaterfall, Agile, or AI-accelerated: 70% of project success is decided in the front end, 20% after go-live, and only 10% in the build — the part that still gets nearly all the attention.
AI Boardroom DiscussionsWhat board members are actually talking about when AI comes up — and how to bridge the conversation to it. Seven business topics boards raise themselves, five objections that quietly stall AI initiatives, and the one-line bridge for each. Drawn from client conversations and current board-governance research.
AI in the News, Legal Signal, Security & Compliance, and ROI briefs — written for executives in regulated industries. No spam, unsubscribe anytime.