BOARD ADVISOR & INDEPENDENT DIRECTOR —
Boards That Get It Right Know Which Decisions Are Theirs
Most boards are approving AI strategies, receiving risk updates, and asking thoughtful questions. And then going home believing they have exercised appropriate oversight. The gap between belief and reality is where fiduciary exposure lives.
"The ripple is always there. The question is whether anyone on your board is assigned to watch for it."
— Jack P. Flaherty, Board Governance Essay 2026
I've sat in boardrooms as a Big 4 director, as Acting Enterprise Risk & Audit Leader for a $10B health system, and as an advisor to organizations navigating the kind of complexity that tends to surface at the worst possible moment. The boards that handled it well all had one thing in common. They knew — in specific, unambiguous terms — which decisions they were actually responsible for overseeing. Not which functions reported up through them. Which decisions.
THE GAP —
Most boards believe they have governance over AI.
They don't.
Boards are approving AI strategies. Receiving risk updates in quarterly packets. Asking thoughtful questions about data governance and model accuracy. Then going home believing they have exercised appropriate oversight.
The gap is not malice. It is not incompetence. It is architecture.
Algorithmic systems are already influencing credit scoring, clinical recommendations, hiring decisions, and risk classifications at organizations where the board genuinely believes it has control. The systems were deployed at the operational level, optimized for efficiency, and by the time they reached the board packet they looked like a technology update — not a fiduciary exposure.
I have seen this pattern repeat across industries.
The sector changes.
The failure mode does not.
FINANCIAL SERVICES
A financial institution had its information security controls signed off by auditors for years. When I came in as lead auditor, it became clear the controls protecting client account data had material gaps — gaps that had been in place for multiple review cycles.
The board had been receiving clean opinions. Nobody had been assigned to look beneath them.
HEALTHCARE
A predictive staffing model — legitimate, well-intentioned — was systematically underallocating clinical hours to a specific patient population. It surfaced in a regulatory review eighteen months after deployment.
The board asked why they hadn't been informed. The honest answer: the governance framework had no mechanism to surface it.
FINTECH & EMERGING TECHNOLOGY
I served as Interim COO for rapid-growth fintechs where speed had outpaced every governance structure they had. The founders had vision. They had funding. They did not have a decision architecture.
Several of those organizations are no longer operating. Not because the technology failed. Because nobody was assigned to watch for the decisions that were quietly compounding risk.
Three industries. Three boards.
One failure mode: no named person, with a named responsibility, assigned to watch for the decisions already being made without them.
That is the problem. That is what I fix.
THE GAP —
Five questions worth putting to your audit committee.
If these questions produce confident, specific, documented answers — the governance is working. If they produce silence, or a referral to IT, or a promise to follow up — the ripple is already in the water.
1.
Which decisions in this organization are currently being made — or materially influenced — by an algorithmic system?
Credit scoring, clinical recommendations, hiring decisions, and risk classifications are common answers. Most boards cannot name them with specificity.
2.
Who is responsible for validating that AI output is accurate before it becomes an action?
If the answer is "the vendor" or "the technology team," the board does not own the decision. It owns the consequence.
3.
When was the last time a human reviewed the model's assumptions against current conditions?
Models optimized for 2022 market conditions operating in 2026 markets are not just outdated. They are active risk.
4.
If the model drifted today — producing systematically biased outputs — how long before the board would know?
One organization found out 18 months after deployment, during a regulatory review. The ripple had been running the entire time.
5.
And who — by name, with a named responsibility — is assigned to watch for that?
This is not an IT question. It is a governance question. And it lands squarely in the boardroom. The absence of a named person with a named responsibility is the gap. That gap is what I close.
QUALIFICATIONS —
The Governance Background Boards Are Looking For.
Twenty-five years of board experience, Big 4 credentials, and a certified governance framework — built from the inside out, not from a governance textbook.
"
Most teams leave a strategy session feeling energized.
The ones that come back six months later are the ones who left with a shared process — not just a shared poster.
— JACK P. FLAHERTY
25
Years in governance, risk, and executive advisory roles
$10B
Jack served as Acting Enterprise Risk & Audit Leader, reporting directly to the Audit Committee
$15B
Board Mandate — Financial institution Data Governance implementation led by Jack at PwC
3
Governance certifications — among the most rigorous in technology risk oversight
THE NEXT STEP —
The right talk for the right room changes what the audience does on Monday.
Jack responds within 24 hours and asks questions before he sends a proposal — starting with who is in the room and what problem they are navigating.
Sign up for The Clear Confidence ReportTM
No spam.
Just useful ideas you can put to work.
Jack P. Flaherty
The Decision Architect
jack@jackpflaherty.com
+1 (213) 537-3507
© 2026 Jack P. Flaherty. All rights reserved. "The Decision Architect" and "The Decision Switch" are trademarks.
Sign up for The Clear Confidence ReportTM
No spam.
Just useful ideas you can put to work.
Jack P. Flaherty
The Decision Architect
jack@jackpflaherty.com
+1 (213) 537-3507
© 2026 Jack P. Flaherty.
All rights reserved. "The Decision Architect"
and "The Decision Switch" are trademarks.