Perspectives
Articles and papers on AI governance, cyber risk, and security risk management.
From the Center for AI Oversight
cfaio.org/insights ↗Research by Brian Allen published through the Center, an independent 501(c)(3). These links open on the Center's site.
Center paperIs AI Mission Critical?Which uses of AI create a board oversight duty, and what the board's record should show.↗
Center paperThe AI Oversight Governance LayerThe decisions that establish what an enterprise governs, who answers, and what record the program must produce.↗
Center paperThe Committee FallacyAssigning AI risk to a committee is not governing it.↗
Center paperBuilders and BuyersDecision rights and accountability for institutions that build AI and those that put it to work.↗
Articles and books
BookBuilding a Cyber Risk Management Program: Evolving Security for the Digital AgeO'Reilly Media, 2023. A detailed framework for designing, developing, and implementing a cyber risk management program.↗
BookEnterprise Security Risk Management: Concepts and ApplicationsRothstein Publishing, 2017. Why security and business interests drift apart, and how a risk discipline brings them back together.↗
Bank Policy Institute, 2024Navigating Artificial Intelligence in BankingHow banking organizations deploy new technologies while continuing to operate in a safe and sound manner. Written while Brian Allen was SVP of Emerging Technology Risk Management at BPI; published under the BPI staff byline.↗
CSO OnlineNew risk management framework helps with SEC mandate complianceThe authors of the Cyber Risk Management Program framework on meeting SEC and other disclosure and reporting rules.↗
Security ManagementA Professional PathEnterprise security risk management raises security from a task-bound trade to a business driver in the C-suite. PDF, September 2017.↗
If your board is asking what it should be asking about AI, start here.
A first conversation is 30 minutes with a senior member of our team. We listen to where you are and tell you plainly what we would look at first.