5 Questions Your Board Should Ask About AI Before Your Next Meeting

In the past eighteen months, AI has moved from a technology budget line item to a governance responsibility. Boards still treating it as the former are accumulating exposure they have not yet accounted for.

The question is no longer “should we use AI?” Someone in your organization already answered it when they signed the first AI vendor contract. What matters now is accountability. Who owns the outcomes when AI makes a wrong call? What oversight exists? And does the board have enough information to fulfill its fiduciary duty when AI shapes consequential decisions?

If you cannot answer the five questions below with specifics, start asking them at the next board meeting.

1. What decisions is AI making right now — and who is accountable for each?

Most boards approved AI investments at a high level: a budget line, a strategic initiative, a vendor relationship. Far fewer have a clear map of where AI actually makes or influences decisions across the organization.

This matters because accountability diffuses fast in AI deployment. When an AI system influences a hiring screen, a credit decision, a supply chain order, or a customer interaction, nobody has answered in advance who owns a wrong outcome. The vendor disclaimed liability in the contract. The business unit assumed someone validated the AI. The executive sponsor has moved on.

So before the next board meeting, ask management for an inventory: every AI system in production, the decisions it influences, and the named executive accountable for its outputs. This is not a technology question. It is a governance question — exactly the kind boards exist to ask.

2. How would we know if an AI system were systematically wrong?

AI fails differently from traditional software. Software either works or it does not. AI produces outputs that look reasonable while quietly drifting — biased, degraded, or misaligned with current conditions.

Most organizations have not solved the monitoring question. A demand forecasting model trained on 2021 data still produces forecasts today. They look like data, not guesses. A customer scoring model can underperform for months before the pattern surfaces. An AI compliance tool can miss an entire risk category if its training data had undocumented gaps.

Ask management directly: what monitoring infrastructure covers each production AI system? What triggers a review? What is the escalation path when performance degrades? “We rely on the vendor” is not an answer. It is a delegation of oversight the board never authorized.

3. What is our liability exposure from a discriminatory or harmful AI outcome?

AI regulation is hardening. The EU AI Act is in force. US federal agencies are issuing enforcement guidance on AI-driven decisions in employment, credit, and housing. States are accelerating — California, Colorado, and a growing list of others.

This is not theoretical. Your D&O insurer will ask about AI exposure if an incident triggers a claim. Regulators will ask when reviewing a compliance failure involving an automated system. Plaintiffs’ counsel will ask when AI-assisted decisions produced disparate outcomes.

At a minimum, boards should know: which AI systems touch regulated processes, what third-party audits or bias assessments exist, and whether legal has reviewed vendor contracts specifically for AI liability allocation. If nobody has reviewed AI liability since contract signing, that review is out of date.

4. Does management have what it needs to govern AI — or just vendor assurances?

This is the explainability question. It reveals whether governance is real or performative.

Vendors sell outcomes. They rarely sell the transparency genuine governance requires. When AI influences a consequential business decision, the responsible internal team should be able to explain what inputs drove the output, what the confidence level was, and what the system would have recommended under different conditions. If the answer is “we trust the vendor’s model,” that is not governance. It is delegation without oversight.

The board’s job: make sure management has the tools, the contractual rights, and the organizational capacity to actually govern the AI systems the company depends on. Ask specifically: for your three highest-impact AI systems, can you audit an individual output and explain it to a regulator? If not, what would it take?

5. What happens if a major AI vendor fails, gets acquired, or reprices?

Concentration risk in AI is real and underappreciated. Organizations that built operations around a handful of AI vendors — sometimes a single foundation model provider — created what looks like a technology exposure but is actually a business continuity risk.

Acquisitions change roadmaps. Pricing changes force build-versus-buy decisions. A model update can change system behavior without notice. Any of these can trigger an expensive, time-pressured migration in a system your operations depend on.

Boards should know the single points of vendor dependency in the AI stack, the estimated switching cost and timeline for each, and whether management has a documented contingency plan. Boards already ask this about key suppliers, banking relationships, and infrastructure. AI vendors deserve the same scrutiny.

Governance Is Already Your Responsibility

None of these questions requires technical expertise. They require the same judgment boards apply to financial controls, legal exposure, and operational risk — applied to a new class of decision-making infrastructure that governance frameworks have not yet caught up with.

The organizations that navigate the next phase of AI well will not necessarily run the most sophisticated AI. They will be the ones whose boards asked the right questions early enough to build governance before an incident forced the issue.

If you want to understand your organization’s AI governance posture before the next board conversation, the AI Readiness Assessment gives you an honest baseline in under ten minutes. For a deeper framework built for executive and board-level conversations, the Executive’s Guide to AI Readiness covers the governance fundamentals in detail.

These questions are a starting point. The answers are your organization’s responsibility — and ultimately, the board’s.