Most board members don't need to understand the technical details of a language model. They need to know how to ask the questions that reveal whether the organisation is managing AI as a business risk and opportunity — or letting it happen on its own.
1. "Where is AI already being used today, without our policy?"
In almost every organisation, employees are already using generative AI tools day-to-day — often without guidance, without a data policy, and without leadership visibility. This isn't a rhetorical question: it's the first step to understanding real risk exposure.
2. "What's the criterion for prioritising one use case over another?"
If the answer is "whoever asks first" or "whatever looks most innovative", there's a governance problem. A mature criterion weighs financial impact, technical feasibility and risk — consistently across departments.
3. "How do we know whether a pilot should scale or be shut down?"
Pilots without an upfront decision criterion tend to never end — neither scaling nor closing. A mature board requires that every initiative define, from the start, the numbers that define success.
4. "Who owns each use case, and what changes for that person?"
AI without a clear owner is AI without accountability. Every initiative needs a business owner — not just a technical one.
5. "Are we prepared for the regulatory risks (AI Act included)?"
You don't need to be a regulatory expert to ask if a plan exists. You need to know the question belongs on the agenda.
Board-level AI literacy isn't optional
These five questions don't replace an AI strategy — but they're a good governance-maturity test. If the board can't confidently answer at least three of them, it's probably time for a structured diagnosis.