Shaping AI governance and control

AI For Business


Bradley Niedzielski is an audit and assurance partner and national business management advisory leader at Deloitte & Touche LLP. With over 20 years of experience, he advises global financial services clients on modernizing risk management and emerging technologies such as artificial intelligence, generative AI, and analytics.

Q How can companies maintain strong control, governance, and human oversight when using artificial intelligence (AI)?

a When implementing A.I.broad controls and strong governance across end-to-end AI programs are critical not only to unlock value, but also to address evolving risk areas, including privacy, accountability, and security. Without human oversight, there is a risk of blind trust in AI output and of AI accidentally accessing and sharing sensitive information internally or externally, whether authorized or not. Strong protocols protect sensitive data. Treat AI as a responsive, intelligent assistant. Data can be processed and highlighted, but always requires human validation. Key practices include a thorough review process, identifying where AI is being deployed, and maintaining “human communication.” Companies can establish and monitor audit, risk committees, or centers of excellence that report to the board. As reliance on AI increases, detailed reviews and governance can help protect operations and reputation.

Q How is AI driving transformation and efficiency in the financial sector?

a AI can automate financial tasks and replace manual tasks such as documentation, control mapping, and gap analysis, resulting in faster, more efficient real-time processes and time savings. Advanced AI systems objectively capture process details, identify missing controls and process owners, and align findings with compliance requirements and technical standards. This automation reduces the risk of human error and allows finance teams to focus on strategic analysis and decision-making. Traditionally, most effort was spent on preparation datareviews cost less. AI has reversed this pattern, reducing the effort required for preparation and allowing more focus on thorough review and analysis.

Q What key controls are required when integrating AI with ERP and cloud?

a Integrate AI in the cloud ERP It relies on precise control at each intersection. Start by identifying AI touchpoints within your technology environment. Strong data governance supports reliable AI input and reduces the risk of errors. Universal standards are still evolving, so review protocols must adapt to each process. Continuous human oversight remains important to verify results and address exceptions. Strong change management and access controls are required to prevent unauthorized actions and configurations. Organizations should proactively conduct controlled pilots, evaluate results, and tighten controls. Maximize the potential of AI while managing risk and compliance with a cautious and responsive approach.

Sponsored by:

“Deloitte” refers to Deloitte Touche Tohmatsu Limited, a UK private limited company by guarantee (“DTTL”), its network of member firms, and one or more of their associated entities. DTTL and each of its member firms are legally separate and independent entities. DTTL (also known as “Deloitte Global”) does not provide services to clients. In the United States, Deloitte refers to one or more of DTTL's U.S. member firms, their affiliates operating in the United States using the “Deloitte” name, and their respective affiliates. Based on public accounting rules and regulations, certain services may not be available to certify clients. Please take a look deloitte.com/about To learn more about our global network of member firms.

This publication contains general information only and Deloitte does not constitute an accounting, business, financial, investment, legal, tax, or other professional representation by means of this publication.
advice and services. This publication is not a substitute for such professional advice or services, and should not be used as the basis for any decisions or actions that may affect your business.
You should consult a qualified professional advisor before making any decisions or taking any actions that may affect your business.

Deloitte is not responsible for any loss suffered by anyone relying on this publication.



Source link