Executive Summary
- The board will ask about AI. Among organizations reporting high AI ROI, 63% include AI on every board agenda. Among low-ROI organizations, only 13% do (Protiviti/BoardProspects Global Board Governance Survey, n=772 board members and C-suite executives, Q4 2025). The correlation is not coincidence — boards that engage on AI force management to stay disciplined.
- A 20-minute board update requires exactly three components: a status framing paragraph (where are you on AI), two numbers the board will ask about (spend and risk exposure), and a recommended action or motion. Everything else is supporting detail they can read offline.
- The fiduciary pressure is real and accelerating. AI-related securities class actions doubled from 2023 to 2024, and the first half of 2025 alone produced 12 filings. Berkley has introduced the first absolute AI exclusion in D&O coverage — meaning a board that cannot demonstrate AI governance may find itself uninsured for AI-related claims (Hunton Andrews Kurth analysis, March 2026).
- At mid-market scale, the bar is low — which is an advantage. Only 12% of Fortune 100 companies disclosed board-level AI education in proxy statements (Harvard Law School Forum on Corporate Governance, January-November 2025 proxy analysis). A mid-market CEO who delivers a structured 20-minute AI update is ahead of most public company peers.
Why This Matters More Than It Did Six Months Ago
Three developments changed the urgency since the last quarter.
Insurers are carving out AI. Berkley’s new D&O exclusion eliminates coverage for any claim “based upon or arising out of the actual or alleged use, deployment, or development of Artificial Intelligence.” AIG and Great American are seeking regulatory clearance for similar provisions. The practical effect: if your company faces an AI-related claim in 2027 and your board cannot document that it exercised oversight in 2026, the insurer may deny the claim entirely. This is not theoretical — it is contract language that already exists in the market.
The SEC is watching the gap between claims and reality. The SEC’s 2026 examination priorities explicitly flag “AI-washing” — companies whose representations about AI usage do not match actual practice. The SEC’s Investor Advisory Committee voted in December 2025 to recommend formal AI disclosure guidelines, including board oversight mechanisms and the impact of AI on human capital. The recommendation is not yet a rule, but it signals the direction. Companies that begin documenting board AI oversight now will find compliance straightforward if rules follow. Companies that wait will scramble.
Directors cross-pollinate. Directors who serve on multiple boards — standard at mid-market scale — are hearing structured AI updates at other companies. The NACD finds 62% of directors now set aside full-board agenda time for AI (NACD 2025 Board Practices & Oversight Survey). When a director gets a polished AI briefing at one company and silence at another, the silent company gets the uncomfortable question.
The 20-Minute Framework
A board AI update is not a technology briefing. Directors do not need to understand large language models. They need to understand three things: what is happening, what it costs and what it risks, and what management recommends. Structure the update accordingly.
Minutes 1-5: Status Framing
Open with a one-paragraph status statement. Not a technology demo. Not a vendor pitch. A strategic positioning statement that answers: where does this company stand on AI, and how does that compare to peer companies in the industry?
Template:
“As of [date], [company] is [stage: evaluating / piloting / deploying / scaling] AI across [number] use cases in [functions]. Total annualized AI-related spend is $[X], representing [Y]% of IT budget. [Number] employees are actively using AI tools, [with/without] a formal acceptable use policy in place. Compared to peer companies at similar scale, this positions us [ahead of / in line with / behind] the adoption curve, based on [specific benchmark].”
This paragraph takes 60 seconds to deliver. It answers every question a director would otherwise interrupt to ask. Build it by filling in the blanks the week before the meeting.
Minutes 6-12: The Two Numbers
Every board conversation about AI eventually lands on two questions: what are we spending? and what could go wrong? Prepare both numbers in advance.
Number 1: Total AI Spend (Actual, Not Budgeted)
Most mid-market companies undercount AI spend by 40-60% because they track tool licenses but miss the surrounding costs. Present a table:
| Category | Annual Cost | Notes |
|---|---|---|
| AI tool licenses (Copilot, ChatGPT, etc.) | $ | Per-seat × headcount |
| Embedded AI features (M365 Copilot, Salesforce Einstein, etc.) | $ | Often bundled into existing contracts |
| Cloud/compute costs attributable to AI | $ | API calls, fine-tuning, data processing |
| Internal labor (AI-related projects, evaluation, training) | $ | Estimate FTE allocation |
| Consulting / advisory | $ | External expertise |
| Shadow AI (employee-purchased tools, personal accounts) | $ | Estimate based on survey or expense audit |
| Total | $ |
The CFO should co-own this number. Boards respect financial rigor. A CEO who says “our AI spend is approximately $X, broken down as follows” sounds like someone in control. A CEO who says “we’re still figuring that out” does not.
Number 2: Risk Exposure (Known, Not Hypothetical)
Present risk as a current-state inventory, not a theoretical framework. Directors are risk managers — they want to know what is exposed today, not what might be exposed in the abstract.
| Risk Category | Current State | Mitigation Status |
|---|---|---|
| Data exposure (company data flowing to AI providers) | [Yes/No — which tools, what data] | [Policy in place / under development / none] |
| Regulatory (AI-specific rules applicable to your industry) | [Identify: HIPAA, SOX, state AI laws, EU AI Act if applicable] | [Assessed / not assessed] |
| Insurance (D&O and cyber policy AI exclusions) | [Reviewed / not reviewed] | [Broker notified / exclusion accepted / negotiating] |
| Workforce (employee AI use without oversight) | [Survey completed / anecdotal / unknown] | [AUP in place / in draft / none] |
| Vendor (existing vendors adding AI features, changing terms) | [Contracts reviewed / not reviewed] | [Legal review scheduled / complete / none] |
If a cell says “unknown” or “none,” that is the board action item.
Minutes 13-18: The Recommendation
End with one clear recommendation — not a wish list, not a strategy deck. One motion the board can discuss, amend, and approve. At mid-market scale, the right first recommendation depends on where the company sits:
| If Your Company Has… | Recommend… |
|---|---|
| No AI policy | Board approval of an interim acceptable use policy (have a draft ready to present) |
| A policy but no budget | A defined AI exploration budget with quarterly reporting back to the board |
| A budget but no metrics | Specific success criteria for current pilots, with a 90-day checkpoint |
| Pilots running but no governance structure | Assignment of AI oversight to an existing committee (audit or risk) with a defined charter addition |
| All of the above in place | A scaling decision: expand from pilot to second department, with defined criteria |
The recommendation converts a status update into a governance act. It gives the board something to approve, which creates a record of oversight — precisely what insurers and regulators will look for later.
Minutes 18-20: Questions
Reserve two minutes for questions. If the board has no questions, the briefing worked. If they have many, the next meeting should dedicate more time. Either outcome is useful data.
Key Data Points
| Data Point | Source | Credibility |
|---|---|---|
| 63% of high-ROI organizations discuss AI at every board meeting vs. 13% of low-ROI organizations | Protiviti/BoardProspects, n=772, Q4 2025 | Independent survey — high credibility |
| 62% of directors now set aside full-board agenda time for AI | NACD 2025 Board Practices & Oversight Survey | Industry association survey — high credibility |
| 40% of companies now charge a board-level committee with AI oversight (up from 11% in 2024) | NACD 2025 Board Practices & Oversight Survey | Industry association survey — high credibility |
| Only 12% of Fortune 100 disclosed board-level AI education in proxy statements | Harvard Law School Forum on Corporate Governance, 2025 | Academic analysis — high credibility |
| AI-related securities class actions doubled from 2023 to 2024; 12 filed in H1 2025 alone | D&O Diary / securities litigation analysis, June 2025 | Legal industry analysis — high credibility |
| Only 26% of boards discuss AI at every meeting; among high-ROI firms, 63% do | Protiviti/BoardProspects, n=772, Q4 2025 | Independent survey — high credibility |
| Berkley introduced first absolute AI exclusion in D&O coverage | Hunton Andrews Kurth insurance analysis, March 2026 | Law firm analysis — high credibility |
| SEC Investor Advisory Committee voted to recommend AI disclosure guidelines (December 2025) | SEC.gov, IAC meeting, December 4, 2025 | Primary regulatory source — highest credibility |
| 88% of organizations deploy AI but only 25% have board-level policies | Multiple sources including NACD, Glass Lewis, 2025-2026 | Converging estimates — high credibility |
| 78% of organizations use AI; only 4–8% generating substantial financial impact | Stanford HAI AI Index 2025 (citing McKinsey, n=1,491) + McKinsey State of AI 2025 (n=1,993) | Medium-High — large consulting surveys, self-reported |
| 5% of organizations generating substantial financial gains; future-built firms: 1.7x revenue growth, 3.6x TSR | BCG “Widening AI Value Gap” (n=1,250, Sep 2025), financial validation via Capital IQ | Medium-High — large survey; BCG advisory conflict noted; financials independently validated |
| Tool access alone doesn’t change what work gets done | NBER Dillon et al. (2025), RCT n=7,137 knowledge workers, 66 firms — Copilot saves 2 hrs/week on email; zero change in task composition without process redesign | HIGH — randomized controlled trial |
| AI exposure linked to longer work hours, not more leisure | NBER Jiang et al. (2025), ATUS n=123,603, 2004–2023 — interquartile AI exposure shift = +2.2 hrs/week work, lower Glassdoor satisfaction despite higher wages | High directional; Medium for precise magnitude (observational) |
| Only 6% of organizations qualify as high performers (>5% EBIT impact from AI) | McKinsey State of AI 2025, n=1,993, November 2025 | Medium-High — consulting survey; self-reported |
| U.S. private AI investment: $109.1B in 2024 (nearly 12× China’s $9.3B) | Stanford HAI AI Index 2025, April 2025 | High — investment data, independent academic source |
| AI inference cost fell 280× between 2022 and 2024 | Stanford HAI AI Index 2025 | High — documented price/performance data |
| Entry-level workers (age 22–25) in AI-exposed roles: 13% relative employment decline since late 2022 | Brynjolfsson et al., ADP payroll data, August 2025 | High — administrative payroll records, causal design |
What This Means for Your Organization
The gap between “boards that engage on AI” and “boards that do not” is no longer abstract. It correlates directly with whether the organization captures value from AI investment. The Protiviti data is the clearest signal: 63% of high-ROI organizations discuss AI at every board meeting. Only 13% of low-ROI organizations do. The board conversation does not cause the ROI, but it forces the discipline — clear metrics, defined accountability, honest assessment — that makes ROI possible.
The insurance development is the most underappreciated risk in mid-market AI governance. Most CEOs have not read their D&O policy’s AI provisions because most policies did not have AI provisions until this year. The Berkley exclusion is a market signal. Within 18 months, AI exclusions will be standard across D&O, E&O, and cyber policies unless the insured can demonstrate governance. A 20-minute board update, documented in meeting minutes, is the beginning of that demonstration.
This cheat sheet is designed to be filled in the week before a board meeting. Customize the status paragraph. Populate the spend table. Complete the risk inventory. Pick one recommendation. The entire preparation should take a CEO and CFO no more than two hours. If filling in the blanks reveals that answers do not exist yet — that itself is the most important finding, and the board meeting becomes the forcing function to get them. If any of these blanks raised questions specific to your organization, I would welcome that conversation — brandon@brandonsneider.com.
Sources
-
Protiviti and BoardProspects, “Global Board Governance Survey,” Q4 2025, n=772 board members and C-suite executives. Independent survey. https://www.protiviti.com/us-en/press-release-ai-board-meeting-discussions-global-survey
-
NACD, “2025 Public Company Board Practices & Oversight Survey — AI Analysis.” Industry association survey. https://www.nacdonline.org/all-governance/governance-resources/governance-surveys/surveys-benchmarking/2025-public-company-board-practices--oversight-survey/2025-board-practices-oversight-ai/
-
Harvard Law School Forum on Corporate Governance, “How Boards Can Lead in a World Remade by AI,” February 2026. Academic analysis citing proxy statement review. https://corpgov.law.harvard.edu/2026/02/19/how-boards-can-lead-in-a-world-remade-by-ai/
-
Harvard Law School Forum on Corporate Governance, “On the 2026 Board Agenda,” January 2026. Academic and practitioner analysis. https://corpgov.law.harvard.edu/2026/01/14/on-the-2026-board-agenda/
-
Hunton Andrews Kurth, “The Continued Proliferation of AI Exclusions,” 2026. Law firm insurance coverage analysis. https://www.hunton.com/hunton-insurance-recovery-blog/the-continued-proliferation-of-ai-exclusions
-
SEC, Investor Advisory Committee Meeting, December 4, 2025. Primary regulatory source. https://www.sec.gov/newsroom/speeches-statements/uyeda-remarks-iac-120425
-
CIO Magazine, “AI Hits the Boardroom: What Directors Will Demand from CIOs in 2026,” 2026. Trade publication. https://www.cio.com/article/4113214/ai-hits-the-boardroom-what-directors-will-demand-from-cios-in-2026.html
-
California Management Review / UC Berkeley, “AI Governance Maturity Matrix: A Roadmap for Smarter Boards,” May 2025. Academic framework. https://cmr.berkeley.edu/2025/05/ai-governance-maturity-matrix-a-roadmap-for-smarter-boards/
-
D&O Diary, “SEC Investor Advisory Committee Recommends AI-Related Disclosure Guidelines,” December 2025. Legal industry analysis. https://www.dandodiary.com/2025/12/articles/securities-laws/sec-investor-advisory-committee-recommends-ai-related-disclosure-guidelines/
-
The Conference Board, “AI and the C-Suite: Implications for CEO Strategy in 2026,” 2026. Business research organization. https://www.conference-board.org/research/ced-policy-backgrounders/ai-and-the-c-suite-implications-for-ceo-strategy-in-2026
-
Stanford HAI, “Artificial Intelligence Index Report 2025,” April 2025. Independent academic synthesis of AI research, adoption, and economic data. 78% organizational AI adoption (citing McKinsey); 71% GenAI in ≥1 function; $109.1B U.S. private AI investment in 2024; 280× inference cost reduction since 2022. Source credibility: HIGH for synthesized statistics; MEDIUM-HIGH for adoption figures sourced from McKinsey survey. https://hai.stanford.edu/ai-index/2025-ai-index-report
-
McKinsey & Company, “The State of AI 2025,” November 2025. n=1,993 respondents across 105 nations. 88% organizational AI usage; 6% qualify as high performers (>5% EBIT impact). Source credibility: MEDIUM-HIGH — large consulting firm survey; self-reported; large-organization skew. https://www.mckinsey.com/capabilities/quantumblack/our-insights/the-state-of-ai
-
BCG, “AI at Work 2025: Momentum Builds, but Gaps Remain,” June 2025. n=10,635 workers across 11 countries. 72% regular AI usage; 5% of organizations generating substantial financial gains. Source credibility: MEDIUM-HIGH — large sample; BCG advisory services conflict noted. https://www.bcg.com/publications/2025/ai-at-work-momentum-builds-but-gaps-remain
-
Brynjolfsson, Chan, and Chen, “Canaries in the Coal Mine,” Stanford Digital Economy Lab, August 2025. ADP payroll records, millions of U.S. workers. 13% relative employment decline for ages 22–25 in AI-exposed roles since late 2022. Source credibility: HIGH — administrative payroll data, causal design. https://digitaleconomy.stanford.edu/wp-content/uploads/2025/08/Canaries_BrynjolfssonChandarChen.pdf
Brandon Sneider | brandon@brandonsneider.com March 2026