Who owns AI governance in an enterprise – IT, security, legal or finance?
Ownership follows the general ledger model: one accountable owner, usually the CIO or Head of AI (in practice, whoever answers to the board for the AI program as a whole), with finance, security, and engineering as primary consumers of a shared record rather than keepers of competing ones. Large enterprises such as JP Morgan add dedicated functions, like Model Risk Governance and a Chief Data Officer, with the authority to block or modify AI deployments.
The General Ledger Model for AI Ownership
Ownership follows the general ledger model. Finance does not own every expense, but it owns the ledger, and every department accepts the ledger's numbers. An AI system of record works best the same way: one accountable owner, usually the CIO or Head of AI. In practice, the right owner is whoever answers to the board for the AI program as a whole. Finance, security, and engineering then consume this single, shared record rather than maintaining separate, competing datasets.
Source: What Is an AI System of Record?
Dedicated Model Risk and Data Governance Roles
JP Morgan maintains a Model Risk Governance function that assesses each AI use case and a Firmwide Chief Data Officer responsible for data governance, quality, and access control. These are dedicated functions, not part-time responsibilities, with the organizational authority to block or modify AI deployments that don't meet governance standards.
Source: What JP Morgan’s Agentic AI Rollout to 250,000 Employees Tells Us
Executive Appointment Trends in Governance
Regulatory pressure is increasing, with the EU AI Act fully in effect and state laws emerging in the U.S. Forrester predicts 60% of Fortune 100 companies will appoint a head of AI governance in 2026.
Source: AI Predictions for 2026: What Enterprise Leaders Need to Know
Also asked as
- Who is responsible for AI governance in the enterprise?
- Which department owns enterprise AI governance?
- Should the CIO, CISO, or Head of AI own AI governance?