Sleep Before Your Next Board Meeting.
AI is now a fiduciary risk. Most boards don't have a reporting system for it. We fix that — before regulators, plaintiffs, or the press do it for you.
Independent. Not your auditor. Not your AI vendor. Not conflicted.
When your external auditor also advises on AI governance, who's watching the watchers? BoardSight exists because audit committees need an independent voice at the table — one that doesn't audit your books or sell you the AI systems you're trying to oversee.
Where boards are thinnest
Credible AI oversight runs on three lines — the teams who operate the AI, an independent function that challenges it, and audit that assures the whole. Boards are weakest on the middle one.
1 of 14
Standards that require an independent second line
We pulled 14 governance standards a board can obtain today — NIST’s AI framework, ISO 42001, the EU AI Act among them — and asked one question of each: does it require the independent second line that challenges AI risk before a failure reaches the board? Exactly one does — a 2011 banking rule. The dedicated AI standards leave it optional. See how we tested.
14
Standards Reviewed
Board-available — every verdict cited
90
Days to Board-Ready
From zero to a full oversight stack
3
The Three Lines
The model we map every instrument to
Built on evidence, not opinion
175+
AI governance research papers
14
Board-available standards reviewed
5
Quantitative governance instruments
Independent
No audit or AI-vendor conflicts
What Changes for You
Walk into your next meeting prepared
The board-ready artifact your audit committee needs this quarter.
AI Risk Register for Audit Committees
A 7-column AI risk register mapping every AI application, the data it touches, whether it reads or writes, risk exposure, impact, probability, and mitigation in place — formatted for board-pack inclusion. Co-created with your team, anchored in NIST CSF, ISO 27001, and NIST AI RMF.
A 7-domain diagnostic that tells your audit committee exactly where it stands.
Board AI Readiness Assessment
64-item scored assessment across seven domains: AI Risk as Enterprise Risk, Director Access to AI Expertise, First-Line Operational Ownership, Second-Line Independent Challenge, Third-Line Audit Capability, Disclosure & Incident Response, and Vendor & Third-Party AI Cascade. Delivers a Director Dashboard, AC Annex, and 12-month remediation roadmap.
Audit committee charter language purpose-built for AI oversight.
AI Governance Charter & Templates
Productized charter clauses for audit committees, risk committees, and dedicated AI committees — mapped to the Building Constitution and calibrated to governance readiness risk bands. Includes reporting cadence defaults, escalation protocols, and standing-item language.
Illustrative regulatory maturity view
The regulatory window is closing
AI governance regulations are advancing globally. Hover over each framework for where it stands and what it means for your board. This is an illustrative relative view — not a measured index — reflecting BoardSight's editorial read as of July 2026.
4
Actively enforcing or expanding
10
Frameworks tracked
Global AI Governance Frameworks — Relative Maturity
As of July 2026Bar length reflects an illustrative relative maturity, not a measured percentage. Status labels are BoardSight's editorial assessment as of July 2026 and are not a regulatory rating.
Regulatory Timeline
The clock is running
These aren't future risks — they're current obligations. If your board doesn't have a documented AI oversight system, the window to build one is closing.
EU AI Act High-Risk Obligations
High-risk (Annex III) obligations — conformity assessments, risk management, human oversight — now apply from December 2027 (product-embedded systems from August 2028) after the Digital Omnibus deferral. Article 50 transparency duties apply from August 2026.
Glass Lewis & ISS Proxy Expectations
AI oversight is an emerging proxy factor for 2026 — Glass Lewis treats it as company-specific (notably after an oversight failure), and ISS engages largely through shareholder proposals. Not yet a blanket vote-against standard, but the direction is clear.
Delaware Caremark / Marchand Precedent
Where AI is mission-critical to the business, Caremark/Marchand duties can require the board to maintain a monitoring system. Director liability is company-specific and fact-intensive — not automatic for lacking an AI report.
Worth Your Time
What other boards are reading
The Fifth Element: What Boards Should Ask About New-Business Build Programs
McKinsey's four elements for incumbent business-building — CEO sponsorship, ring-fenced ventures, stage-gated funding, dedicated build team — are correct and incomplete. For boards approving venture-build programs in 2026, this brief adds the fifth element directors should require before any new business ships its first commercial-grade product: a governance gate, with named evidence requirements, owned by the audit committee.
By BoardSight Research
The Three Lines Model, Instrumented for AI — Executive Brief
A two-page distillation for audit committee chairs framing the three converging pressures: EU AI Act, SEC disclosure guidance, and Delaware Caremark expansion. Maps the CC governance stack to each line.
By James Waddell
What 14 Governance Standards Reveal About the Weakest Line in AI Oversight
Long-form narrative making the second-line finding accessible to a non-academic audience. Introduces the finding that only 1 of 14 board-available standards requires an independent second line, and positions BoardSight as the applied governance layer boards need.
By Cognitive Corp Research Team
Why It Works
We found the gap. Then we built the fix.
We reviewed 14 governance standards a board can pull today against the Three Lines model your audit committee already uses. The result: the independent risk function — the line that protects the board — is required by just one of them. That's where we focus.
Nearly every standard
1st Line — Operational Ownership
standards require it
2nd Line — Independent Risk
in most standards
3rd Line — Internal Audit
Why BoardSight
You've heard the principles. Now get the instruments.
Most governance options educate, certify, or advise with one hand tied. We deliver instruments and sit at your table.
Membership Networks Gives you a community | Certification Programs Gives you a certificate | Your Audit Firm Gives you a framework (but can't audit it) | BoardSight Gives you a score, a diagnosis, and a seat at your table | |
|---|---|---|---|---|
| Independent from your auditor & AI vendors | ||||
| Quantitative governance scoring instruments | ||||
| Board-ready deliverables (not just education) | ||||
| Retained advisory seat at the committee table | ||||
| Grounded in 14 standards (not one proprietary model) | ||||
| Three Lines of Defense instrumentation |
Membership Networks
Gives you a community
Certification Programs
Gives you a certificate
Your Audit Firm
Gives you a framework (but can't audit it)
BoardSight
Gives you a score, a diagnosis, and a seat at your table
Request a 15-minute briefing.
No obligation. No pitch deck. Just clarity about where your board stands on AI risk — and what to do next.
Get ClarityAsk BoardSight
Have a governance question?
The BoardSight Advisor is available to account holders. Create a free account to ask it anything about AI oversight for your board.
BoardSight Advisor
AI Governance Guidance
Questions it can answer
Free. Also unlocks the Member Vault templates.