Get featured on the show by leaving us a Voice Mail: https://bit.ly/MIPVM
John Rood shares how organisations can unlock real value from AI by balancing innovation, governance, and compliance. Learn why robust frameworks, practical training, and a bottom-up approach are key to sustainable AI adoption and risk management.
👉 Full Show Notes
https://www.microsoftinnovationpodcast.com/792
🎙️ What you’ll learn
How to implement effective AI governance without stifling innovation
Practical steps for building an AI management system
The role of ISO 42001 and the EU AI Act in compliance
Strategies to drive AI adoption and avoid shadow AI
How to design ongoing AI literacy programmes for all staff
✅ Highlights
“A poorly designed policy, I think, does stifle innovation. I think a well-conceived policy manages that trade-off.”
“Shadow AI happens because organisations go buy an AI product and then lock it down.”
“Our first recommendation… is that you’ve got to have someone to champion AI initiatives.”
“Most organisations will start either from ISO 42001, or… the NIST AI risk management framework.”
“The idea is we’re not just trying to put together a set of policies… What we’re trying to create is a living process.”
“A great AI management system defines who has to get trained in what, and then make sure that actually happens on a regular basis.”
“If your customers knew how you treat their data, they might not be your customers anymore.”
“The top-down programmes tend to go poorly, whereas the… bottom-up programmes tend to do much better.”
“When we are able to empower more people… we start to build the organisation’s muscle.”
“The first step… is always regulatory.”
“EU AI Act is written… to be extraordinarily broad.”
“At the top of the pyramid, there’s a certain set of fairly robust training or literacy requirements that should be for whoever’s actually making the AI.”
🧰 Mentioned
ISO 42001: https://www.iso.org/standard/42001
EU AI Act: https://artificialintelligenceact.eu/the-act/
NIST AI risk management framework: https://www.nist.gov/itl/ai-risk-management-framework
GDPR: https://gdpr.eu/
✅Keywords
ai governance, iso 42001, eu ai act, compliance, shadow ai, risk management, ai management system, ai literacy, bottom-up adoption, regulatory, data privacy, nist framework
Microsoft 365 Copilot Adoption is a Microsoft Press book for leaders and consultants. It shows how to identify high-value use cases, set guardrails, enable champions, and measure impact, so Copilot sticks. Practical frameworks, checklists, and metrics you can use this month. Get the book: https://bit.ly/CopilotAdoption
Support the show
If you want to get in touch with me, you can message me here on Linkedin.
Thanks for listening 🚀 - Mark Smith