Before AI governance comes AI readiness: Lessons from five years of watching organizations adapt
Over the past five years, I have had the opportunity to work across healthcare, organizational leadership, policy development, data and analytics, innovation initiatives in community services, and strategic planning. During that time, I have observed organizations of all sizes wrestle with transformation efforts ranging from digital modernization and quality improvement to the more recent wave of artificial intelligence (AI) adoption.
What has become increasingly apparent is that an organization's success with AI has far less to do with the technology itself and far more to do with the organizational foundations that existed before AI arrived. As discussions about AI governance, ethics, and policy accelerate, many organizations are rushing to create AI committees, draft responsible AI frameworks, and establish oversight mechanisms. While these efforts are important, they often overlook a more fundamental question: Is the organization capable of governing itself effectively in the first place?
The policy governance gap
One of the most common organizational weaknesses I have observed is the absence of a mature framework governing policy development itself. Organizations may possess hundreds of policies, procedures, standards, and guidelines, however, relatively few have robust processes that define how policies are created, approved, reviewed, revised, retired, or monitored over time. As a result, policy libraries often become cluttered with outdated documents, conflicting guidance, unclear ownership structures, and inconsistent review cycles.
Add to that the introduction of AI governance policies into this environment and organizations are effectively building a second floor on a foundation that was never completed. AI governance requires clear accountability, risk assessment, monitoring, revision processes, and decision making authority. These same capabilities should already exist within the broader policy governance framework of the organization. The first lesson I have learned is simple: Organizations that struggle to govern their existing policies will inevitably struggle to govern AI. Before creating AI specific governance structures, organizations should first ensure they have mature processes governing how policies themselves are developed, maintained, and retired.
Technology adoption is rarely a technology problem
Another observation from the past five years is that successful adoption initiatives are almost never driven by technology alone. Whether implementing new operational systems, data platforms, robotics programs, or AI tools, the determining factor has consistently been organizational readiness. The organizations that succeed tend to share several characteristics:
Conversely, organizations that struggle often focus heavily on the technology while underinvesting in the people and processes needed to support it. I have seen organizations purchase sophisticated digital tools without adequately defining workflows. Others have invested heavily in analytics platforms while failing to establish governance structures for data quality, stewardship, or accountability. The same pattern is emerging with AI.
Many organizations are discussing large language models, automation, predictive analytics, and generative AI capabilities before addressing foundational questions about data governance, decision rights, risk management, and organizational accountability. The technology may be new, but the organizational challenges are not.
Leadership capacity determines transformation capacity
Perhaps the most significant lesson from observing organizations over the past five years is that leadership capacity often determines transformation capacity. Organizations frequently underestimate the amount of leadership attention required to support meaningful change. Successful organizations tend to view governance, strategy, and culture as interconnected systems rather than separate initiatives. Leaders create alignment between organizational goals, operational priorities, risk management practices, and innovation efforts.
Less effective organizations often approach these areas independently. Governance becomes a compliance exercise, innovation becomes disconnected from operational realities and policies become static documents rather than active management tools. When AI enters this environment, the result is often confusion. Teams are uncertain about acceptable use cases. Risk assessments are inconsistent and decision making authority becomes unclear.
In contrast, organizations with mature leadership and governance systems can integrate AI more effectively because the underlying structures already exist. AI becomes another capability to manage rather than a disruptive force requiring entirely new ways of operating.
Three conclusions for organizations preparing for AI
Based on these observations, I believe three conclusions stand out. First, organizations should prioritize policy governance before AI governance. A clear framework for creating, reviewing, revising, and retiring organizational policies is a prerequisite for effective AI oversight.
Second, AI adoption is fundamentally an organizational challenge, not a technology challenge. Success depends more on governance, culture, leadership, and change management than on selecting the latest tool.
Third, leadership maturity is emerging as a competitive advantage. Organizations with strong governance structures and adaptive leadership teams will be better positioned to realize the benefits of AI while managing associated risks.
As AI continues to evolve, there will be understandable pressure to move quickly. However, organizations should resist the temptation to view AI governance as a standalone initiative. The organizations most likely to succeed will be those that recognize a simple truth: effective AI governance is ultimately built upon effective organizational governance. In many cases, the most important work is not implementing AI itself, it’s strengthening the systems, policies, and leadership practices that make responsible AI adoption possible.
CT
ThompsonBAYTED is a freelance research and consulting firm offering professional services in English, French, and Polish.
We tailor evidence-based research and strategic consulting services to your organization's unique goals.
