Writing about the part of AI adoption nobody demos: what happens between a working prototype and a system somebody is willing to sign their name against. Drawn from advisory work and from running our own AI products in production.
The proof of concept worked, everyone was impressed and then nothing happened for nine months. This is so common it is almost a pattern, and the usual explanations are wrong. The blocker is rarely the model. It is that nobody can say who is accountable when it is wrong.
If you already hold ISO 27001, how much of AI governance is already covered? Less than most people assume, but the gap is narrower than the vendors selling you a new programme would like. A practical look at where the two standards meet and where they genuinely do not.
Every AI governance conversation starts with the same question, and most organisations cannot answer it. Here is what to record, how to find the systems you did not know you were running and how to keep the list current once the initial push is over.