As AI becomes increasingly embedded across business operations, AI governance is emerging as a critical enterprise risk priority. The challenge for organisations is no longer simply how to adopt AI, but how to establish clear accountability, authority and controls around its use, particularly as AI begins to reshape the nature and speed of cyber risk. 

AI can accelerate attacks, expand the attack surface and introduce autonomous systems that may be compromised, deceived or act beyond their intended authority. These events can quickly result in losses spanning fraud, cyber, liability, business interruption and even physical damage, challenging traditional approaches to risk management and insurance. 

Using practical loss scenarios, this panel will examine AI governance through the lens of cyber risk and resilience: Who owns and authorises AI activity? What controls and oversight are needed? Can organisations respond effectively when incidents unfold at machine speed? And how do governance decisions ultimately affect resilience, insurabilityand risk transfer? 

The discussion will explore what boards, risk leaders and organisations need to put in place today to govern AI responsibly, strengthen cyber resilience and prepare for the realities of AI-related loss, including who must act when incidents occur, where resilience gaps exist and how recovery will ultimately be funded.