AI Governance Institute logo
AI Governance Institute

Intelligence for Compliance and GRC Teams

← News
Research2026-06-19

Responsible AI in practice, AI Company Data Initiative case studies

What happened

The AI Company Data Initiative published a case study collection in March 2026 documenting how leading enterprises have built practical AI governance structures. The Banco Bradesco and SAP case study describes a three-tier governance model: a strategic AI steering committee sets policy and risk appetite, a quarterly cross-functional review group tracks program health across business units, and a monthly operational AI steering committee handles approvals and emerging issues. The model explicitly separates strategic authority from tactical operations, routes feedback to accountable process owners, and establishes recurring review cadences that teams can plan around. The collection is part of AICDI's broader effort to document what AI governance looks like in practice at large organizations, as opposed to what frameworks recommend in theory.

Why it matters

  • ·Most enterprise AI governance programs fail to connect board-level policy to operational decisions. The layered committee model in these case studies offers a tested structural answer, with defined escalation paths between tiers rather than ad hoc escalation.
  • ·Quarterly cross-functional reviews with business unit representation address one of the most common governance gaps: ensuring that risk owners outside the central AI team are accountable for their own deployments and cannot treat governance as someone else's job.
  • ·Monthly operational cadences align with the tempo of real AI deployment cycles. Teams that know when the next approval window is can plan releases around it; teams that don't know tend to deploy first and seek approval retroactively.
  • ·Case study evidence from named enterprises carries more internal persuasive weight than framework recommendations when governance teams are making the case for committee structures to leadership skeptical of overhead.

Governance controls affected

BRD-002AI Governance Committee Charter and Decision RightsBRD-007Federated AI Governance DesignHOC-002Human Approval RequirementsHOC-006Escalation Path for AI DecisionsHOC-007Board AI Risk Reporting and Escalation Thresholds

What to do now

  • ☐Map your current AI governance structure against the three-tier model (strategic steering, cross-functional review, operational committee) and identify which tiers are absent or operating informally.
  • ☐Define decision rights for each governance tier: document what the operational committee can approve independently versus what requires escalation to strategic oversight.
  • ☐Establish and publish a recurring review cadence for each tier, and communicate it to business unit owners so deployment timelines can be planned around approval windows.
  • ☐Review the full AICDI 2025 case study collection for additional sector-relevant examples and document which governance patterns are applicable to your program.

What to watch next

AICDI is expanding its case study library throughout 2026. Watch for additional sector-specific examples in financial services and healthcare, where AI governance committee requirements are increasingly tied to regulatory expectations under the EU AI Act and emerging US federal guidance on high-risk AI system oversight.

AI Governance Weekly

Weekly intelligence on AI regulation, enforcement, and governance. Every Thursday.

Powered by Buttondown.

Related Coverage

Research2026-07-17

Chief AI Officers, CIOs, and CDOs Must Own AI Governance Operationally, Not Just in Policy

A practitioner guide published by Data Society on July 11, 2026 argues that AI governance has crossed from aspirational policy into an urgent operational necessity for enterprises. The guide specifies that clear ownership must vest in Chief AI Officers, CIOs, or CDOs working across business, data, and technology functions, rather than residing in legal or compliance departments alone. It further prescribes embedding governance controls into everyday workflows such as project approvals and model evaluations so that governance shapes real decisions rather than existing as a parallel paper exercise.

Research2026-07-13

Agentic AI Creates Organizational Authority Gaps That Existing Governance Frameworks Were Not Built to Handle, MIT Sloan Warns

MIT Sloan Management Review published research identifying a structural governance dilemma at the heart of enterprise agentic AI adoption: organizations are deploying autonomous systems without the oversight infrastructure needed to manage dynamic, context-dependent decision rights. The research warns that without centralized governance and clear authority boundaries negotiated across IT, HR, and business units, organizations face compliance failures and runaway autonomous systems. Leaders are advised to treat AI agents with the same oversight rigor applied to human employees.

Research2026-07-08

DDMI's Two-Step AI Approval Model Shows How GRC Tooling Can Operationalize Guardrails at Enterprise Scale

Data and analytics firm DDMI published a case study describing its structured two-step AI approval process, which evaluates use case soundness and ethical boundaries before submission to an Architecture Review Committee and Architecture Review Board. The model uses a GRC platform to manage AI initiatives with embedded guardrails covering legal compliance, security, human accountability, and continuous monitoring. The case study offers a named, replicable operating model for enterprise compliance teams building or maturing their own AI governance programs.