Is Innovation Outpacing Responsible AI?

The management question is not whether to โ€œallowโ€ AI, but how to industrialise decision-making around it. For CIOs and transformation leaders, the practical issue is who can approve use cases, who owns risk acceptance, and how exceptions are handled when business units want speed. If responsible AI sits only with a central policy team, it can become a bottleneck; if it sits nowhere, shadow AI will fill the gap.

This makes governance a portfolio discipline, not a compliance afterthought. Leaders should expect different review paths for low-risk productivity tools, customer-facing applications and high-impact decisions. The trade-off is clear: faster experimentation versus stronger controls. The right operating model gives teams predictable thresholds, documented decision rights and a light-touch path for low-risk use cases, while reserving deeper scrutiny for the few that can affect rights, safety, reputation or regulated outcomes.

The more useful question for the board is what evidence proves the programme is working. Mature responsible AI needs metrics beyond โ€œpolicy completedโ€ or โ€œtraining deliveredโ€: cycle time for review, percentage of use cases assessed before launch, number of exceptions approved, incidents detected, and whether risk gating is changing product outcomes. Without those indicators, leaders cannot tell whether the programme is reducing friction or simply adding another layer of process.

There is also a workforce implication. AI fluency is becoming a management capability, not a specialist one, so ownership should extend beyond the ethics lead to product, legal, security and business sponsors. Next questions for executives: Which AI decisions require board visibility? What is the minimum control set for each risk tier? And who has the authority and funding to stop, slow or redesign a use case when the risk profile changes?


Ethical AI, responsible AI, trustworthy AI. These terms had little meaning just a few years ago, but the AIโ€™s acceptance and momentum has been steadily increasing. The point of responsible AI is to ensure that AI efforts donโ€™t cause harm to individuals or society at large, though the topic is not limited to risk mitigation. Responsible AI can also drive business value. One catalyst igniting responsible AI is regulation, such as the EUโ€™s AI Act. โ€œItโ€™s more about anticipating regulations and making sure you are prepared to be compliant. Itโ€™s no longer about waiting until the regulations are fully baked and out,โ€ says Beena Ammanath, technology trust ethics leader at Deloitte and author of Trustworthy AI: A Business Guide for Navigating Trust and Ethics in AI. โ€œIโ€™ve seen [an increasing number] of AI trainings for board members, members of the C-suite and employees from an upskilling or reskilling perspective in terms of AI fluency, how to use AI most effectively and balancing risk with the optimal use of AI.โ€ Responsible AI involves several things, as discussed in Deloitteโ€™s recent report about building trustworthy generative AI. Those considerations include:
  • Mapping trust domains to generative AI
  • Fairness and impartiality
  • Transparency and explainability
Related:SAPโ€™s Sophia Mendelsohn on Using AI to Scale Sustainability
Deloitte is also Original Postress-releases/deloitte-sponsors-world-economic-forum-centre-for-trustworthy-technology.html" target="_blank" rel="noopener" shape="rect">a founding sponsor of the World Economic Forum Centre for Trustworthy Technologyย that promotes and facilitates ethical technology.
Beena Ammanath, Deloitte
โ€œOrganizational leaders are looking for the tangible things they can do today, whether itโ€™s training their workforce on AI ethics, putting out AI use policies and guidelines or making sure they have checks and balances in place when AI is being used,โ€ says Ammanath. โ€œThereโ€™s much more bias towards action — what we as an organization can do now.โ€

AI Adoption Versus Responsible AI Adoption

While the adoption of both AI and responsible AI adoption have increased, the path to risk mitigation and driving business value can be realized more easily if companies prioritize responsible AI. For example, Boston Consulting Group (BCG) and MIT teamed up on some surveys, one of which found that 20% of companies have responsible AI programs, 30% have nothing, and the rest fall somewhere in between. โ€œThere wasnโ€™t a lot of correlation between AI maturity and responsible AI maturity. Interestingly, youโ€™d think all the really mature [organizations] would also have mature responsible AI,โ€ says Steven Mills, managing director and partner and chief AI ethics officer at BCG. โ€œWhen we dug into the data, we found that it was advantageous to scale responsible AI ahead of AI.โ€ Related:7 Top IT Challenges in 2024 The reason for that is by tackling responsible AI first, system lapses happen less frequently, and organizations are able to drive more value from their AI investments. โ€œItโ€™s less about guardrails and policy, and more thinking about uses cases and outcomes. Iโ€™ve always told people the policies you create, the risk frameworks you create cannot be static, they have to evolve over time as you learn,โ€ says Mills. Mills set an example at BCG, for example. He updated the policy four or five times during the first 12 months of the generative AI explosion because there were use cases that needed more eyes on them. โ€œYou have to accept that you learn as you go. You also need a tracking function to understand how the technology is evolving. What new risks are popping up?โ€ says Mills. It also helps to have someone whoโ€™s responsible and accountable for a responsible AI program, such as a chief ethics officer. If thatโ€™s not practical, maybe a CIO or CTO might spearhead the effort or in the case of small companies, the CEO. However, driving value requires the support of the organization, meaning the chief ethics officer or other responsible person has the financial and human resources they need to drive action. Related:Does Your Organization Need a Dedicated AI Leader? It turns out that the companies best equipped to manage AI risks out of the gate operate in highly regulated industries because they already know how to model risk management.
Steven Mills, BCG
โ€œI always stress to companies that itโ€™s a journey to build a mature responsible AI program. We figure it takes two or three years to go from zero to really mature but you donโ€™t have to wait two or three years to realize any benefit,โ€ says Mills. โ€œParticularly if you accelerate the review of use cases, you will realize benefit very quickly and itโ€™s the right thing to do.โ€ Bear in mind that responsible AI is not just about regulatory compliance and risk management. It can be a source of business value. According to the BCG/MIT research referenced above, half of responsible AI leaders report having developed better products and services and nearly the same amount says theyโ€™re achieving better brand recognition. Slightly fewer (43%) cite accelerated innovation.

Bottom Line

Todayโ€™s organizations are more likely to have a responsible AI program than they were just a couple of years ago because they realize there are AI-related risks, more regulation is coming that will require compliance and they want to drive as much value as possible. Mature responsible AI programs are more likely to achieve all three, though most companies still lack a mature responsible AI program. While not all organizations have the deep pockets larger organizations enjoy, they are nevertheless wise to have a responsible AI program in place and someone to lead the effort. Just remember that person needs adequate resources and the authority to run a successful program.
https://www.informationweek.com/it-leadership/is-innovation-outpacing-responsible-ai-

Enjoyed this article? Sign up for our newsletter to receive regular insights and stay connected.