Skip to main content

The First 3 Steps to Building Data and AI Governance

Sunil Senan
Infosys

In today’s data and AI driven world, enterprises across industries are utilizing AI to invent new business models, reimagine business and achieve efficiency in operations. However, enterprises may face challenges like flawed or biased AI decisions, sensitive data breaches and rising regulatory risks, if not controlled and governed. To mitigate these risks, enterprises must embrace robust principles of responsible AI and embed them across all layers of the AI ecosystem — data, model and usage.

  • Data: Ensure data used for training AI is accurate, representative, and free from biases, with strong privacy and security controls.
  • AI Models: Controls for accuracy, relevance, explainability and fairness along with security measures for trusted reliable AI models.
  • Usage and Consumption: Monitor AI initiatives continuously and apply moderation layers to ensure ethical and compliant outputs, maintaining trust in AI solutions.

Enterprises must establish controls across the three layers based on:

  • Trust: Trust policy and guardrails to make AI explainable, traceable, accurate, reproducible and accountable
  • Ethics: Ethics policy and procedures to ensure AI initiatives are fair, free of biases and are protecting fundamental human rights
  • Privacy: Ensure privacy remains at the center of all initiatives, preserving privacy of individuals
  • Compliance: Ensure lawful and auditable AI initiatives
  • Security: Robust and secure data and AI ecosystems

On these fundamentals, enterprises must take the first three concrete steps to ensure robust governance over AI and data initiatives:

Step 1: Outline an organization-wide AI Governance Strategy

Enterprise's leadership should clearly outline the organization's strategy, vision and mission to ensure that responsible data and AI consumption is the primary focus of all individuals idealizing, developing and consuming data and AI.

Enterprise should define comprehensive policies and procedures at enterprise level around the five principles, actively govern the initiatives and educate its employees.

Step 2: Establish Operating Model

Subsequently, the next area of focus should be the people, processes and technology involved in these initiatives.

  • Enterprises must set up a Governance CoE, identify all the personas responsible along with clear roles and responsibilities assigned to different personas.
  • Enterprises must set up robust framework to govern the data and AI initiatives along with monitoring to ensure governance and compliance with the evolving regulations.
  • Enterprises must modernize their tools and technologies to manage and govern the initiatives. (e.g. tools for assessment, controls implementation, audit and monitoring)

Step 3: Operationalize the data and AI Governance Framework

Enterprises at this stage will be ready to govern each and every data and AI initiative by design.

  • Enterprises should start with documenting the AI use cases with governance related fingerprints.
  • Next, enterprises must prioritize the use cases and assess the risk for each of the use cases to enforce appropriate control for governance.

These three steps help enterprises to ensure responsible and sustainable data and AI initiatives, leading to better brand value and customer satisfaction.

Sunil Senan is Global Head of Data, Analytics and AI at Infosys

Hot Topics

The Latest

A recent Rocket Software and Foundry study found that just 28% of organizations fully leverage their mainframe data, a concerning statistic given its critical role in powering AI models, predictive analytics, and informed decision-making ...

What kind of ROI is your organization seeing on its technology investments? If your answer is "it's complicated," you're not alone. According to a recent study conducted by Apptio ... there is a disconnect between enterprise technology spending and organizations' ability to measure the results ...

In today’s data and AI driven world, enterprises across industries are utilizing AI to invent new business models, reimagine business and achieve efficiency in operations. However, enterprises may face challenges like flawed or biased AI decisions, sensitive data breaches and rising regulatory risks ...

In MEAN TIME TO INSIGHT Episode 12, Shamus McGillicuddy, VP of Research, Network Infrastructure and Operations, at EMA discusses purchasing new network observability solutions.... 

There's an image problem with mobile app security. While it's critical for highly regulated industries like financial services, it is often overlooked in others. This usually comes down to development priorities, which typically fall into three categories: user experience, app performance, and app security. When dealing with finite resources such as time, shifting priorities, and team skill sets, engineering teams often have to prioritize one over the others. Usually, security is the odd man out ...

Image
Guardsquare

IT outages, caused by poor-quality software updates, are no longer rare incidents but rather frequent occurrences, directly impacting over half of US consumers. According to the 2024 Software Failure Sentiment Report from Harness, many now equate these failures to critical public health crises ...

In just a few months, Google will again head to Washington DC and meet with the government for a two-week remedy trial to cement the fate of what happens to Chrome and its search business in the face of ongoing antitrust court case(s). Or, Google may proactively decide to make changes, putting the power in its hands to outline a suitable remedy. Regardless of the outcome, one thing is sure: there will be far more implications for AI than just a shift in Google's Search business ... 

Image
Chrome

In today's fast-paced digital world, Application Performance Monitoring (APM) is crucial for maintaining the health of an organization's digital ecosystem. However, the complexities of modern IT environments, including distributed architectures, hybrid clouds, and dynamic workloads, present significant challenges ... This blog explores the challenges of implementing application performance monitoring (APM) and offers strategies for overcoming them ...

Service disruptions remain a critical concern for IT and business executives, with 88% of respondents saying they believe another major incident will occur in the next 12 months, according to a study from PagerDuty ...

IT infrastructure (on-premises, cloud, or hybrid) is becoming larger and more complex. IT management tools need data to drive better decision making and more process automation to complement manual intervention by IT staff. That is why smart organizations invest in the systems and strategies needed to make their IT infrastructure more resilient in the event of disruption, and why many are turning to application performance monitoring (APM) in conjunction with high availability (HA) clusters ...

The First 3 Steps to Building Data and AI Governance

Sunil Senan
Infosys

In today’s data and AI driven world, enterprises across industries are utilizing AI to invent new business models, reimagine business and achieve efficiency in operations. However, enterprises may face challenges like flawed or biased AI decisions, sensitive data breaches and rising regulatory risks, if not controlled and governed. To mitigate these risks, enterprises must embrace robust principles of responsible AI and embed them across all layers of the AI ecosystem — data, model and usage.

  • Data: Ensure data used for training AI is accurate, representative, and free from biases, with strong privacy and security controls.
  • AI Models: Controls for accuracy, relevance, explainability and fairness along with security measures for trusted reliable AI models.
  • Usage and Consumption: Monitor AI initiatives continuously and apply moderation layers to ensure ethical and compliant outputs, maintaining trust in AI solutions.

Enterprises must establish controls across the three layers based on:

  • Trust: Trust policy and guardrails to make AI explainable, traceable, accurate, reproducible and accountable
  • Ethics: Ethics policy and procedures to ensure AI initiatives are fair, free of biases and are protecting fundamental human rights
  • Privacy: Ensure privacy remains at the center of all initiatives, preserving privacy of individuals
  • Compliance: Ensure lawful and auditable AI initiatives
  • Security: Robust and secure data and AI ecosystems

On these fundamentals, enterprises must take the first three concrete steps to ensure robust governance over AI and data initiatives:

Step 1: Outline an organization-wide AI Governance Strategy

Enterprise's leadership should clearly outline the organization's strategy, vision and mission to ensure that responsible data and AI consumption is the primary focus of all individuals idealizing, developing and consuming data and AI.

Enterprise should define comprehensive policies and procedures at enterprise level around the five principles, actively govern the initiatives and educate its employees.

Step 2: Establish Operating Model

Subsequently, the next area of focus should be the people, processes and technology involved in these initiatives.

  • Enterprises must set up a Governance CoE, identify all the personas responsible along with clear roles and responsibilities assigned to different personas.
  • Enterprises must set up robust framework to govern the data and AI initiatives along with monitoring to ensure governance and compliance with the evolving regulations.
  • Enterprises must modernize their tools and technologies to manage and govern the initiatives. (e.g. tools for assessment, controls implementation, audit and monitoring)

Step 3: Operationalize the data and AI Governance Framework

Enterprises at this stage will be ready to govern each and every data and AI initiative by design.

  • Enterprises should start with documenting the AI use cases with governance related fingerprints.
  • Next, enterprises must prioritize the use cases and assess the risk for each of the use cases to enforce appropriate control for governance.

These three steps help enterprises to ensure responsible and sustainable data and AI initiatives, leading to better brand value and customer satisfaction.

Sunil Senan is Global Head of Data, Analytics and AI at Infosys

Hot Topics

The Latest

A recent Rocket Software and Foundry study found that just 28% of organizations fully leverage their mainframe data, a concerning statistic given its critical role in powering AI models, predictive analytics, and informed decision-making ...

What kind of ROI is your organization seeing on its technology investments? If your answer is "it's complicated," you're not alone. According to a recent study conducted by Apptio ... there is a disconnect between enterprise technology spending and organizations' ability to measure the results ...

In today’s data and AI driven world, enterprises across industries are utilizing AI to invent new business models, reimagine business and achieve efficiency in operations. However, enterprises may face challenges like flawed or biased AI decisions, sensitive data breaches and rising regulatory risks ...

In MEAN TIME TO INSIGHT Episode 12, Shamus McGillicuddy, VP of Research, Network Infrastructure and Operations, at EMA discusses purchasing new network observability solutions.... 

There's an image problem with mobile app security. While it's critical for highly regulated industries like financial services, it is often overlooked in others. This usually comes down to development priorities, which typically fall into three categories: user experience, app performance, and app security. When dealing with finite resources such as time, shifting priorities, and team skill sets, engineering teams often have to prioritize one over the others. Usually, security is the odd man out ...

Image
Guardsquare

IT outages, caused by poor-quality software updates, are no longer rare incidents but rather frequent occurrences, directly impacting over half of US consumers. According to the 2024 Software Failure Sentiment Report from Harness, many now equate these failures to critical public health crises ...

In just a few months, Google will again head to Washington DC and meet with the government for a two-week remedy trial to cement the fate of what happens to Chrome and its search business in the face of ongoing antitrust court case(s). Or, Google may proactively decide to make changes, putting the power in its hands to outline a suitable remedy. Regardless of the outcome, one thing is sure: there will be far more implications for AI than just a shift in Google's Search business ... 

Image
Chrome

In today's fast-paced digital world, Application Performance Monitoring (APM) is crucial for maintaining the health of an organization's digital ecosystem. However, the complexities of modern IT environments, including distributed architectures, hybrid clouds, and dynamic workloads, present significant challenges ... This blog explores the challenges of implementing application performance monitoring (APM) and offers strategies for overcoming them ...

Service disruptions remain a critical concern for IT and business executives, with 88% of respondents saying they believe another major incident will occur in the next 12 months, according to a study from PagerDuty ...

IT infrastructure (on-premises, cloud, or hybrid) is becoming larger and more complex. IT management tools need data to drive better decision making and more process automation to complement manual intervention by IT staff. That is why smart organizations invest in the systems and strategies needed to make their IT infrastructure more resilient in the event of disruption, and why many are turning to application performance monitoring (APM) in conjunction with high availability (HA) clusters ...