<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0" xmlns:itunes="http://www.itunes.com/dtds/podcast-1.0.dtd" xmlns:googleplay="http://www.google.com/schemas/play-podcasts/1.0"><channel><title><![CDATA[The Director Brief: The Frame]]></title><description><![CDATA[The strategic argument of the week...]]></description><link>https://www.thedirectorbrief.com/s/the-frame</link><image><url>https://substackcdn.com/image/fetch/$s_!Qgl5!,w_256,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F63b7bce4-815e-4528-a299-c4afa8f19d7f_256x256.png</url><title>The Director Brief: The Frame</title><link>https://www.thedirectorbrief.com/s/the-frame</link></image><generator>Substack</generator><lastBuildDate>Wed, 12 Aug 2026 17:09:40 GMT</lastBuildDate><atom:link href="https://www.thedirectorbrief.com/feed" rel="self" type="application/rss+xml"/><copyright><![CDATA[Dharmash Mistry]]></copyright><language><![CDATA[en]]></language><webMaster><![CDATA[thedirectorbrief@substack.com]]></webMaster><itunes:owner><itunes:email><![CDATA[thedirectorbrief@substack.com]]></itunes:email><itunes:name><![CDATA[Dharmash Mistry]]></itunes:name></itunes:owner><itunes:author><![CDATA[Dharmash Mistry]]></itunes:author><googleplay:owner><![CDATA[thedirectorbrief@substack.com]]></googleplay:owner><googleplay:email><![CDATA[thedirectorbrief@substack.com]]></googleplay:email><googleplay:author><![CDATA[Dharmash Mistry]]></googleplay:author><itunes:block><![CDATA[Yes]]></itunes:block><item><title><![CDATA[Somewhere, a Start-Up Is Already Pricing the Gap in Your AI Strategy…..]]></title><description><![CDATA[The stark difference between &#8220;we&#8217;ve adopted AI&#8221; vs &#8220;we understand what AI does to our economics&#8221;]]></description><link>https://www.thedirectorbrief.com/p/somewhere-a-start-up-is-already-pricing</link><guid isPermaLink="false">https://www.thedirectorbrief.com/p/somewhere-a-start-up-is-already-pricing</guid><dc:creator><![CDATA[Dharmash Mistry]]></dc:creator><pubDate>Sun, 19 Jul 2026 10:54:29 GMT</pubDate><enclosure url="https://substackcdn.com/image/fetch/$s_!d2nK!,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Fa3effdb7-a815-419d-905e-2df8e3e846ee_1122x1402.png" length="0" type="image/jpeg"/><content:encoded><![CDATA[<p><span>The real story this year is not that boards are behind &#8212; most aren&#8217;t, particularly. It&#8217;s that the market is being redrawn faster with increasingly asymmetric outcomes by businesses that aren&#8217;t waiting for anyone&#8217;s AI strategy to catch up.</span></p><div class="callout-block" data-callout="true"><p><strong><span>In 60 seconds</span></strong></p><p><span>1/ Only ~5% of companies show substantial financial gain from AI so far &#8212; but that 5% posts roughly four times the three-year shareholder return of everyone else. The prize is real, and concentrated.</span></p><p><span>2/ The sharper board question isn&#8217;t &#8220;what&#8217;s our AI strategy?&#8221; It&#8217;s &#8220;what would a well-funded AI-native rival do to our value chain first?&#8221;</span></p><p><span>3/ Three examples of how AI natives play: Cursor attacks your product. Harvey attacks how the work gets done. Sierra attacks how you make money.</span></p><p><span>4/ The Six Ps force the choices that actually matter: posture, profit pools, proprietary edge, platform, process, proof &amp; permission.</span></p><p><span>5/ This week&#8217;s Library piece turns all of this into an </span><a href="https://www.thedirectorbrief.com/p/stop-counting-pilots-what-should"><span>actual dashboard </span></a><span>&#8212; what to measure, and what good and bad look like on one page.</span></p></div><p><strong><span>Why clarity of strategy &amp; focused execution are the story, not adoption</span></strong></p><p><span>BCG&#8217;s 2026 AI transformation work found that only around 5% of organisations have generated substantial financial gains from AI &#8212; though the few that have show roughly four times the three-year shareholder return of everyone else. McKinsey&#8217;s parallel measurement work makes the diagnosis sharper still: most companies cannot draw an auditable line from model performance to user adoption to operating KPIs to financial impact. Activity is high. Evidence is thin.</span></p><p><span>So the fashionable board question &#8212; &#8220;What is our AI strategy?&#8221; &#8212; turns out to be the wrong one. It invites a slide deck: pilots, copilots, a vendor logo wall, a training completion rate. None of that tells a board whether the business is safer or more valuable. The question that actually earns its place at committee is the &#8216;Founder Question&#8217;:</span></p><blockquote><p><strong>With &#163;100 million, frontier models, no legacy systems and no sacred cows, where would we attack ourselves first?</strong> </p></blockquote><p><span>The gap between &#8220;we adopted AI&#8221; and &#8220;we understand what AI does to our economics&#8221; is exactly where a challenger gets in.</span></p><p><strong><span>What the smartest firms actually agree on</span></strong></p><p><span>The leading strategy firms and business schools are finally coming to a simple truth - </span><strong><span>AI value is not captured by access to models</span></strong><span>. It is captured by redesigning the business around workflows, proprietary advantage and measurable economics. Everyone can rent the same frontier model. Nobody can rent your customer data, your distribution, or your regulatory licence. That is where the real argument sits &#8212; not in who has the best chatbot.</span></p><h4><strong>Three AI disruptors. Three warnings.</strong></h4><p>AI-native start-ups aren&#8217;t simply &#8220;using AI more&#8221; than incumbents &#8212; they&#8217;re built on a different premise: intelligence is infrastructure, not headcount. AWS&#8217;s 2026 research found 68% of AI-native start-ups have a comprehensive AI strategy versus 45% of start-ups generally, 72% have built proprietary AI capability versus 30%, and 98% employ dedicated AI talent versus 70% of large enterprises. A Harvard/INSEAD study reported by Business Insider found these firms run about 25% smaller, with 13% more engineers and far fewer entry-level staff and managers than their non-AI-native peers.</p><p>Three examples bring this to life: </p><p><strong>Cursor &#8211; reinvent the product.</strong> Instead of adding AI to traditional coding software, Cursor rebuilt the developer experience around AI agents that can understand, write and modify software. The result: reported recurring revenue reached <strong>$2bn by March 2026</strong>, while <strong>64% of the Fortune 500</strong> now use it. <strong>Lesson:</strong> don&#8217;t bolt AI onto yesterday&#8217;s product. Ask: <em>if we started again today, would we build our core product the same way&#8212;or could an AI-native startup make it obsolete?</em></p><p><strong>Harvey &#8211; reinvent the workflow.</strong> Harvey applies AI deeply to legal work&#8212;researching, drafting, reviewing contracts and executing complex workflows that once consumed hours of expensive professional time. It now serves <strong>142,000+ lawyers across 1,500+ organisations</strong>, including <strong>60%+ of the AmLaw 100</strong>, and was valued at <strong>$11bn</strong> in March 2026. <strong>Lesson:</strong> don&#8217;t scatter AI across 100 productivity pilots. Find the few high-value workflows where AI can collapse hours into minutes&#8212;and build a defensible advantage around your data, expertise and customers before someone else does.</p><p><strong>Sierra &#8211; reinvent the economics.</strong> Sierra&#8217;s AI agents don&#8217;t just answer customer questions; they can take actions and resolve problems, with pricing increasingly tied to <strong>outcomes rather than software seats or human hours</strong>. It passed <strong>$100m ARR just seven quarters after launch</strong> and was valued at <strong>over $15bn</strong> by May 2026. <strong>Lesson:</strong> AI may not merely reduce your costs&#8212;it can destroy the basis on which you charge. Ask: <em>what happens if a competitor delivers our customer&#8217;s outcome at a fraction of our price?</em></p><h4><strong>Corporates can reinvent themselves too</strong></h4><p><strong>John Deere and Caterpillar show that century-old industrial companies can become technology businesses without abandoning their core.</strong> Deere has moved from selling tractors to combining machines with <strong>GPS, computer vision, AI, autonomy and a digital Operations Center</strong>&#8212;turning farming into a data-driven system and creating software and recurring-revenue opportunities around the machine. Caterpillar has built an ecosystem of <strong>1.6m+ connected assets</strong>, using their data, analytics and AI for predictive maintenance, productivity and autonomous equipment. <strong>Lesson:</strong> incumbents can transform&#8212;but only when technology becomes core to the product, customer value and business model, not an IT initiative bolted onto the side.</p><div class="callout-block" data-callout="true"><p>Put the Founder question on your board table every 6 months : <strong>With &#163;100 million, frontier models, no legacy systems and no sacred cows, where would we attack ourselves first?</strong> </p><p>Incumbents ask, &#8220;how do we add AI to our business?&#8221; AI-native challengers ask, &#8220;what business becomes possible once coordination, analysis and customer interaction are radically cheaper?&#8221;</p><p><strong>The uncomfortable truth:</strong> startups have no legacy revenue to defend. They can reinvent your <strong>product, workflow and profit pool</strong> while you are still debating how much of today&#8217;s business you are prepared to cannibalise.</p></div><p><strong><span>The Six Ps of an AI strategy: a board framework, not a CIO one</span></strong></p><p><span>How do you systematically make connected proactive choices from where you are to where you want to be -  with clarity regarding competitive advantage (cost or differentiation), how to get there &amp; how to measure the outcome. Welcome to the 6 P&#8217;s framework - a simple framework akin to what the leading strategy houses and business schools are selling:</span></p><div class="captioned-image-container"><figure><a class="image-link image2 is-viewable-img" target="_blank" href="https://substackcdn.com/image/fetch/$s_!d2nK!,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Fa3effdb7-a815-419d-905e-2df8e3e846ee_1122x1402.png" data-component-name="Image2ToDOM"><div class="image2-inset"><picture><source type="image/webp" srcset="https://substackcdn.com/image/fetch/$s_!d2nK!,w_424,c_limit,f_webp,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Fa3effdb7-a815-419d-905e-2df8e3e846ee_1122x1402.png 424w, https://substackcdn.com/image/fetch/$s_!d2nK!,w_848,c_limit,f_webp,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Fa3effdb7-a815-419d-905e-2df8e3e846ee_1122x1402.png 848w, https://substackcdn.com/image/fetch/$s_!d2nK!,w_1272,c_limit,f_webp,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Fa3effdb7-a815-419d-905e-2df8e3e846ee_1122x1402.png 1272w, https://substackcdn.com/image/fetch/$s_!d2nK!,w_1456,c_limit,f_webp,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Fa3effdb7-a815-419d-905e-2df8e3e846ee_1122x1402.png 1456w" sizes="100vw"><img src="https://substackcdn.com/image/fetch/$s_!d2nK!,w_1456,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Fa3effdb7-a815-419d-905e-2df8e3e846ee_1122x1402.png" width="1122" height="1402" data-attrs="{&quot;src&quot;:&quot;https://substack-post-media.s3.amazonaws.com/public/images/a3effdb7-a815-419d-905e-2df8e3e846ee_1122x1402.png&quot;,&quot;srcNoWatermark&quot;:null,&quot;fullscreen&quot;:null,&quot;imageSize&quot;:null,&quot;height&quot;:1402,&quot;width&quot;:1122,&quot;resizeWidth&quot;:null,&quot;bytes&quot;:1741596,&quot;alt&quot;:null,&quot;title&quot;:null,&quot;type&quot;:&quot;image/png&quot;,&quot;href&quot;:null,&quot;belowTheFold&quot;:true,&quot;topImage&quot;:false,&quot;internalRedirect&quot;:&quot;https://www.thedirectorbrief.com/i/207431722?img=https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Fa3effdb7-a815-419d-905e-2df8e3e846ee_1122x1402.png&quot;,&quot;isProcessing&quot;:false,&quot;align&quot;:null,&quot;offset&quot;:false}" class="sizing-normal" alt="" srcset="https://substackcdn.com/image/fetch/$s_!d2nK!,w_424,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Fa3effdb7-a815-419d-905e-2df8e3e846ee_1122x1402.png 424w, https://substackcdn.com/image/fetch/$s_!d2nK!,w_848,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Fa3effdb7-a815-419d-905e-2df8e3e846ee_1122x1402.png 848w, https://substackcdn.com/image/fetch/$s_!d2nK!,w_1272,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Fa3effdb7-a815-419d-905e-2df8e3e846ee_1122x1402.png 1272w, https://substackcdn.com/image/fetch/$s_!d2nK!,w_1456,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Fa3effdb7-a815-419d-905e-2df8e3e846ee_1122x1402.png 1456w" sizes="100vw" loading="lazy"></picture><div class="image-link-expand"><div class="pencraft pc-display-flex pc-gap-8 pc-reset"><button tabindex="0" type="button" class="pencraft pc-reset pencraft icon-container restack-image"><svg aria-hidden="true" width="20" height="20" viewBox="0 0 20 20" fill="none" stroke-width="1.5" stroke="var(--color-fg-primary)" stroke-linecap="round" stroke-linejoin="round" xmlns="http://www.w3.org/2000/svg"><g><path d="M2.53001 7.81595C3.49179 4.73911 6.43281 2.5 9.91173 2.5C13.1684 2.5 15.9537 4.46214 17.0852 7.23684L17.6179 8.67647M17.6179 8.67647L18.5002 4.26471M17.6179 8.67647L13.6473 6.91176M17.4995 12.1841C16.5378 15.2609 13.5967 17.5 10.1178 17.5C6.86118 17.5 4.07589 15.5379 2.94432 12.7632L2.41165 11.3235M2.41165 11.3235L1.5293 15.7353M2.41165 11.3235L6.38224 13.0882"></path></g></svg></button><button tabindex="0" type="button" class="pencraft pc-reset pencraft icon-container view-image"><svg xmlns="http://www.w3.org/2000/svg" width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="lucide lucide-maximize2 lucide-maximize-2"><polyline points="15 3 21 3 21 9"></polyline><polyline points="9 21 3 21 3 15"></polyline><line x1="21" x2="14" y1="3" y2="10"></line><line x1="3" x2="10" y1="21" y2="14"></line></svg></button></div></div></div></a></figure></div><p><strong><span>Posture. </span></strong><span>By business line: are we defending the core, deploying AI inside the current model, reshaping the operating model around it, inventing something new &#8212; or deliberately waiting? Vague answers here mean nothing downstream will be sharp either.</span></p><p><strong><span>Profit pools. </span></strong><span>AI doesn&#8217;t hit &#8220;the company&#8221; evenly. One way to look at this is from the frame of how an agentic start up might attack your business? As per the examples of Cursor, Harvey and Sierra discussed above. </span></p><p><strong><span>Proprietary advantage. </span></strong><span>Most companies have no AI moat &#8212; they have a rental agreement with the same model everyone else uses. Durable advantage comes from what can&#8217;t be rented: proprietary data, embedded workflow, trust, brand, distribution, regulatory position. The board question is simple &#8212; what&#8217;s still ours once everyone has the same model?</span></p><p><strong><span>Platform. </span></strong><span>Buy, boost, build, self-host or avoid &#8212; by use case, not by enterprise-wide edict. Buying is fast and undifferentiated. Building is powerful and expensive. Most companies will end up hybrid: frontier models for hard reasoning, cheap models for routine work, tight controls where a regulator is watching.</span></p><p><strong><span>Process. </span></strong><span>This is where strategy either becomes real or quietly dies. AI bolted onto a bad process just produces faster bureaucracy. The board shouldn&#8217;t accept &#8220;we have 40 use cases&#8221; as evidence of anything. Ask instead which five workflows have been redesigned end-to-end, who owns each one, and what the before-and-after economics actually are.</span></p><p><strong><span>Proof &amp; permission. </span></strong><span>Proof means value is measured, not asserted. Permission means the risk appetite is explicit &#8212; where AI can act alone, where it must stay a copilot, where it&#8217;s banned outright. As agentic systems move from answering questions to taking actions, this stops being a technology question and becomes a board risk-appetite question.</span></p><div class="subscription-widget-wrap-editor" data-attrs="{&quot;url&quot;:&quot;https://www.thedirectorbrief.com/subscribe?&quot;,&quot;text&quot;:&quot;Subscribe&quot;,&quot;language&quot;:&quot;en&quot;}" data-component-name="SubscribeWidgetToDOM"><div class="subscription-widget show-subscribe"><div class="preamble"><p class="cta-caption">Thanks for reading The Director Brief! Subscribe for free to receive new posts </p></div><form class="subscription-widget-subscribe"><input type="email" class="email-input" name="email" placeholder="Type your email&#8230;" tabindex="-1"><input type="submit" class="button primary" value="Subscribe"><div class="fake-input-wrapper"><div class="fake-input"></div><div class="fake-button"></div></div></form></div></div><p><strong><span>The cost curve nobody&#8217;s watching</span></strong></p><p><span>There&#8217;s a second reason &#8220;proof &amp; permission&#8221; earns its place as a standalone P: AI is not simply getting cheaper. Commodity-tier models are in genuine price freefall &#8212; a routine task now costs a fraction of what it did eighteen months ago. But the frontier, agentic layer is moving the opposite way. Run the current published output-token prices in order and the ceiling has roughly quintupled since the cheapest commodity model, before you even count the volume: agentic coding tasks have been measured consuming up to 1,000 times more tokens than a simple reasoning query, with up to 30x variance between two runs of the same task and no guarantee the extra spend buys extra accuracy. &#8220;AI gets cheaper&#8221; is the headline. &#8220;AI is deflating at the commodity layer and inflating at the frontier layer&#8221; is the board-relevant sentence &#8212; and it&#8217;s why unit economics per workflow, not per licence, belongs on the dashboard.</span></p><p><strong><span>What to ask at your next board meeting (&amp; how to measure progress)?</span></strong></p><p><span>Ten sharp questions for your next board meeting, below &#8212; and a worked example of what an actual </span><a href="https://www.thedirectorbrief.com/p/stop-counting-pilots-what-should"><span>AI strategy dashboard</span></a><span> looks like, in this week&#8217;s Library piece. Between them, &#8220;how many copilots have we deployed?&#8221; stops being an acceptable answer to anything, and the only question that matters takes its place: where will AI change the economics of our business before the market does it for us?</span></p><p><strong><span>FIVE FOR THE CHAIR &#183; EXTENDED</span></strong></p><div class="callout-block" data-callout="true"><p><strong><span>Ten Questions for Your Next Board Meeting</span></strong></p><p><strong><span>1.  What would an AI-native attacker do to our most profitable workflow first &#8212; and why have we not done it ourselves?</span></strong></p><p><strong><span>2.  Which three profit pools are most exposed to AI-driven repricing of cost, service, risk or customer access? Where would an agentic start up attack us first?</span></strong></p><p><strong><span>3.  What is our AI posture by business line: defend, deploy, reshape, invent or wait?</span></strong></p><p><strong><span>4.  Which AI initiatives are table stakes, and which could create proprietary advantage?</span></strong></p><p><strong><span>5.  What proprietary data, workflow, distribution, trust or regulatory position are we using to create a moat?</span></strong></p><p><strong><span>6.  Which workflows have been redesigned end-to-end &#8212; not just given copilots?</span></strong></p><p><strong><span>7.  What do we buy, boost, build, self-host or deliberately avoid &#8212; and why?</span></strong></p><p><strong><span>8.  What is the full AI unit economics by use case, including token, cloud, vendor, integration, compliance and change costs?</span></strong></p><p><strong><span>9.  Where can AI act autonomously, where must it remain human-in-the-loop, and where is it prohibited?</span></strong></p><p><strong><span>10.  Which AI projects have we killed, and what did we learn from them?</span></strong></p></div><div class="captioned-button-wrap" data-attrs="{&quot;url&quot;:&quot;https://www.thedirectorbrief.com/p/somewhere-a-start-up-is-already-pricing?utm_source=substack&utm_medium=email&utm_content=share&action=share&quot;,&quot;text&quot;:&quot;Share&quot;}" data-component-name="CaptionedButtonToDOM"><div class="preamble"><p class="cta-caption">Thanks for reading The Director Brief! If you found this post helpful, feel free to share it.</p></div><p class="button-wrapper" data-attrs="{&quot;url&quot;:&quot;https://www.thedirectorbrief.com/p/somewhere-a-start-up-is-already-pricing?utm_source=substack&utm_medium=email&utm_content=share&action=share&quot;,&quot;text&quot;:&quot;Share&quot;}" data-component-name="ButtonCreateButton"><a class="button primary" href="https://www.thedirectorbrief.com/p/somewhere-a-start-up-is-already-pricing?utm_source=substack&utm_medium=email&utm_content=share&action=share"><span>Share</span></a></p></div><div><hr></div><p><strong><span>Every week in TheDirectorBrief.</span></strong></p><p><strong><span>## &#127919; The Frame</span></strong><span> &#8212; one topical AI conversation relevant to Boards. Designed to encourage debate and action. Covering 4 domaines: Strategy &amp; innovation; risk &amp; resilience; governance &amp; accountability; capability &amp; culture.</span></p><p><strong><span>## &#10067;Five for the Chair</span></strong><span> &#8212; five board-ready questions anchored in this week&#8217;s Frame, screenshot-able into next Monday&#8217;s agenda. </span><em><span>What should the board actually debate?</span></em></p><p><strong><span>## &#128225; The Signal</span></strong><span> &#8212; five Board relevant AI developments you need to know about this week. Plus the STAT and CHART of the week. </span><em><span>What changed &#8212; and what should we do?</span></em></p><p><strong><span>## &#128218; The Library</span></strong><span> &#8212; &#8220;AI academy&#8221;: the manual: primers, tools, templates, checklists, plus the Monday-Morning build (one tool to test, one prompt that earns its place). </span><em><span>Do we have the literacy to govern this?</span></em></p><p><strong><span>One read. Thirty minutes. Before your next board deck</span></strong></p><p><span>Subscribe free at</span><a href="http://www.thedirectorbrief.com"><span> </span></a><strong><a href="http://www.thedirectorbrief.com"><span>TheDirectorBrief.com</span></a></strong></p><p><span>To help me make this better please feel free to send me any comments, feedback or suggestions to hello@thedirectorsbrief.com. Thank you for reading.</span></p><p><strong>Disclaimer:</strong> These are my personal views, shaped in a fast-moving environment and open to revision. They should not be taken as representing the perspectives of any boards or advisory roles, past or present.</p><div><hr></div><h6><strong><span>Sources &amp; Further Reading</span></strong></h6><h6><span>Diligent Institute, Board AI use rises: Director Confidence Index June 2026 &#8212; diligent.com/resources/blog/dci-board-ai-use-2026</span></h6><h6><span>McKinsey, The AI reckoning: How boards can evolve &#8212; mckinsey.com/capabilities/mckinsey-technology/our-insights/the-ai-reckoning-how-boards-can-evolve</span></h6><h6><span>BCG, CEOs and Boards Are Aligned on AI in Theory, but Divided in Practice &#8212; bcg.com/publications/2026/ceos-and-boards-are-aligned-on-ai-in-theory-but-divided-in-practice</span></h6><h6><span>McKinsey, From promise to impact: how companies can measure and realize the full value of AI &#8212; mckinsey.com/capabilities/quantumblack/our-insights/from-promise-to-impact-how-companies-can-measure-and-realize-the-full-value-of-ai</span></h6><h6><span>McKinsey, Cost versus value: Managing agentic AI system performance &#8212; mckinsey.com/capabilities/quantumblack/our-insights/cost-versus-value-managing-agentic-ai-system-performance</span></h6><h6><span>Harvard Business School / HBR, The Gen AI Playbook for Organizations, HBR Prize note &#8212; hbs.edu/news/releases/hbr-2025-prize</span></h6><h6><span>MIT Sloan, Buy, boost, or build? Choose your path to generative AI &#8212; mitsloan.mit.edu/ideas-made-to-matter/buy-boost-or-build-choose-your-path-to-generative-ai</span></h6><h6><span>London Business School, How can you use AI to redefine competitive advantage? &#8212; london.edu/think/think-ahead-ai-for-competitive-advantage</span></h6><h6><span>INSEAD, Why Strategy Matters in the Age of AI &#8212; knowledge.insead.edu/strategy/why-strategy-matters-age-ai</span></h6><h6><span>AWS, Global Startup Trends Report: AI-native startups &#8212; press.aboutamazon.com/2026/6/aws-global-startup-trends-report-reveals-ai-native-startups-are-reaching-billion-dollar-valuations-in-half-the-time</span></h6><h6><span>Stratechery, Agents Over Bubbles &#8212; stratechery.com/2026/agents-over-bubbles</span></h6><p></p>]]></content:encoded></item><item><title><![CDATA[Ten ways AI can blow up your business.....]]></title><description><![CDATA[And what to do about it]]></description><link>https://www.thedirectorbrief.com/p/ten-ways-ai-can-blow-up-your-business</link><guid isPermaLink="false">https://www.thedirectorbrief.com/p/ten-ways-ai-can-blow-up-your-business</guid><dc:creator><![CDATA[Dharmash Mistry]]></dc:creator><pubDate>Thu, 09 Jul 2026 05:53:15 GMT</pubDate><enclosure url="https://substackcdn.com/image/fetch/$s_!boL6!,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Fb4689185-831e-4dcb-8482-1c99b77156e1_1448x1086.png" length="0" type="image/jpeg"/><content:encoded><![CDATA[<h2>Ten ways AI can blow up your business</h2><p><strong>Your board was built for risks that hold still. AI doesn&#8217;t.</strong></p><p>How many Boards or committees spend forty minutes on AI - where the CIO runs accuracy charts. The General Counsel updates on the EU AI Act &amp; the AI policy document gets signed off without a question? Polished papers, all minuted.</p><p>No realtime metrics or discussion on model agency or risk classification? How many decisions in that room reflected that the system under discussion had shipped several vendor updates since the last cycle with updated token pricing &amp; multiple APIs accessing your data &#8212; or that the model on the slide wasn&#8217;t the model in production.</p><p>The governance is theatre. The AI risk is live &amp; different for 3 reasons:</p><blockquote><p><strong>It is probabilistic.</strong> Traditional software works or it doesn&#8217;t. AI is right most of the time &#8212; and wrong with total confidence some of the time. &#8216;Show me the test results&#8217; gets you a confidence interval, not a certainty. Most directors have never governed one.</p><p><strong>It doesn&#8217;t sit still.</strong> Models drift, vendors push updates, data shifts. A compliant system in January can be non-compliant in June without anyone touching the code. And it doesn&#8217;t stay where you put it: AI now sits inside spreadsheets, copilots, supplier portals and browser extensions, mostly uninventoried.</p><p><strong>It moves at machine speed.</strong> Use cases deploy in weeks; board cycles run in quarters; assurance runs in years. A biased model can serve a million decisions before the next risk committee meets. A deepfake can move a share price in an afternoon.</p></blockquote><p></p><div class="captioned-image-container"><figure><a class="image-link image2 is-viewable-img" target="_blank" href="https://substackcdn.com/image/fetch/$s_!boL6!,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Fb4689185-831e-4dcb-8482-1c99b77156e1_1448x1086.png" data-component-name="Image2ToDOM"><div class="image2-inset"><picture><source type="image/webp" srcset="https://substackcdn.com/image/fetch/$s_!boL6!,w_424,c_limit,f_webp,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Fb4689185-831e-4dcb-8482-1c99b77156e1_1448x1086.png 424w, https://substackcdn.com/image/fetch/$s_!boL6!,w_848,c_limit,f_webp,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Fb4689185-831e-4dcb-8482-1c99b77156e1_1448x1086.png 848w, https://substackcdn.com/image/fetch/$s_!boL6!,w_1272,c_limit,f_webp,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Fb4689185-831e-4dcb-8482-1c99b77156e1_1448x1086.png 1272w, https://substackcdn.com/image/fetch/$s_!boL6!,w_1456,c_limit,f_webp,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Fb4689185-831e-4dcb-8482-1c99b77156e1_1448x1086.png 1456w" sizes="100vw"><img src="https://substackcdn.com/image/fetch/$s_!boL6!,w_1456,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Fb4689185-831e-4dcb-8482-1c99b77156e1_1448x1086.png" width="1448" height="1086" data-attrs="{&quot;src&quot;:&quot;https://substack-post-media.s3.amazonaws.com/public/images/b4689185-831e-4dcb-8482-1c99b77156e1_1448x1086.png&quot;,&quot;srcNoWatermark&quot;:null,&quot;fullscreen&quot;:null,&quot;imageSize&quot;:null,&quot;height&quot;:1086,&quot;width&quot;:1448,&quot;resizeWidth&quot;:null,&quot;bytes&quot;:2653020,&quot;alt&quot;:null,&quot;title&quot;:null,&quot;type&quot;:&quot;image/png&quot;,&quot;href&quot;:null,&quot;belowTheFold&quot;:false,&quot;topImage&quot;:true,&quot;internalRedirect&quot;:&quot;https://www.thedirectorbrief.com/i/206135740?img=https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Fb4689185-831e-4dcb-8482-1c99b77156e1_1448x1086.png&quot;,&quot;isProcessing&quot;:false,&quot;align&quot;:null,&quot;offset&quot;:false}" class="sizing-normal" alt="" srcset="https://substackcdn.com/image/fetch/$s_!boL6!,w_424,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Fb4689185-831e-4dcb-8482-1c99b77156e1_1448x1086.png 424w, https://substackcdn.com/image/fetch/$s_!boL6!,w_848,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Fb4689185-831e-4dcb-8482-1c99b77156e1_1448x1086.png 848w, https://substackcdn.com/image/fetch/$s_!boL6!,w_1272,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Fb4689185-831e-4dcb-8482-1c99b77156e1_1448x1086.png 1272w, https://substackcdn.com/image/fetch/$s_!boL6!,w_1456,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Fb4689185-831e-4dcb-8482-1c99b77156e1_1448x1086.png 1456w" sizes="100vw" fetchpriority="high"></picture><div class="image-link-expand"><div class="pencraft pc-display-flex pc-gap-8 pc-reset"><button tabindex="0" type="button" class="pencraft pc-reset pencraft icon-container restack-image"><svg aria-hidden="true" width="20" height="20" viewBox="0 0 20 20" fill="none" stroke-width="1.5" stroke="var(--color-fg-primary)" stroke-linecap="round" stroke-linejoin="round" xmlns="http://www.w3.org/2000/svg"><g><path d="M2.53001 7.81595C3.49179 4.73911 6.43281 2.5 9.91173 2.5C13.1684 2.5 15.9537 4.46214 17.0852 7.23684L17.6179 8.67647M17.6179 8.67647L18.5002 4.26471M17.6179 8.67647L13.6473 6.91176M17.4995 12.1841C16.5378 15.2609 13.5967 17.5 10.1178 17.5C6.86118 17.5 4.07589 15.5379 2.94432 12.7632L2.41165 11.3235M2.41165 11.3235L1.5293 15.7353M2.41165 11.3235L6.38224 13.0882"></path></g></svg></button><button tabindex="0" type="button" class="pencraft pc-reset pencraft icon-container view-image"><svg xmlns="http://www.w3.org/2000/svg" width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="lucide lucide-maximize2 lucide-maximize-2"><polyline points="15 3 21 3 21 9"></polyline><polyline points="9 21 3 21 3 15"></polyline><line x1="21" x2="14" y1="3" y2="10"></line><line x1="3" x2="10" y1="21" y2="14"></line></svg></button></div></div></div></a></figure></div><p>So what: the annual audit cycle, the quarterly board pack and the policy attestation were designed for a different clock speed. Here are the ten ways that mismatch blows up &#8212; and the risk is rarely the technology. It is the governance around it.</p><p><strong>1. Strategy &#8212; someone reprices your industry while you run pilots.</strong> The most dangerous slide is the one describing AI as &#8216;efficiency&#8217;. The real question is whether anyone &#8212; incumbent or new entrant &#8212; is using AI to reprice the industry around you. If management cannot say where your proprietary advantage now sits and what AI does to it, that is your first red flag.</p><p><strong>2. Decisions &#8212; the model is wrong with confidence.</strong> Hallucination, bias, drift, opacity &#8212; and increasingly, decisions taken autonomously at machine speed before a human can intervene. The board does not need to validate models. It needs to know that someone does, and that the highest-stakes decisions carry a human check by design. Would you know if your AI got something wrong an hour ago &#8212; or only when a regulator, a customer, prospective hire or a tribunal told you?</p><p><strong>3. Data &#8212; your crown jewels leak one prompt at a time.</strong> Staff are pasting confidential material into public tools today. Models are being trained on content the company may not own. Data governance is not hygiene; it is the foundation of defensible AI &#8212; and the first thing a regulator or claimant will pull on. Do you know which of your data is feeding which models? Are you sure you want foundation models accessing your data (ie not training your competitors), are &#8216;enterprise&#8217; promises &amp; guardrails valid when the underlying model retains data (ie Claude Fable). Is model control a competitive advantage or a moat in your category? The most recent high profile example is of Anthropic rebuilding elements of Figma, where a partner entered the category (Figma share price down circa 50%YTD). The recent debate is around in-house open source models running your own compute stack - given current frontier model token costs this is now becoming a viable (safer) alternative for many?</p><p><strong>4. Cyber and fraud &#8212; the attacker now has AI too.</strong> Deepfake CEO impersonation is no longer hypothetical; finance teams have wired money to cloned voices. The launch and fanfare around Anthropic&#8217;s launch of Mythos has changed the Board conversation. However, one of the biggest risks lies within - &#8216;prompt injection&#8217; can turn an AI assistant into a hijacked insider with real credentials. If cyber reporting to your board does not name AI-enabled threats &amp; the new &#8216;surface&#8217; they are attacking explicitly, the reporting is incomplete.</p><p><strong>5. Regulation &#8212; &#8216;we didn&#8217;t know the tool used AI&#8217; is not a defence.</strong> The EU AI Act is real, phased and binding for anyone touching the EU market - with the high risk regime landing this August. The UK floor is hardening; the SEC has already enforced against misleading AI claims. Regulators have stopped accepting an annual sign-off as evidence, they want model level records, continuously.</p><div class="subscription-widget-wrap-editor" data-attrs="{&quot;url&quot;:&quot;https://www.thedirectorbrief.com/subscribe?&quot;,&quot;text&quot;:&quot;Subscribe&quot;,&quot;language&quot;:&quot;en&quot;}" data-component-name="SubscribeWidgetToDOM"><div class="subscription-widget show-subscribe"><div class="preamble"><p class="cta-caption">Thanks for reading The Director Brief! Subscribe. Every Thursday</p></div><form class="subscription-widget-subscribe"><input type="email" class="email-input" name="email" placeholder="Type your email&#8230;" tabindex="-1"><input type="submit" class="button primary" value="Subscribe"><div class="fake-input-wrapper"><div class="fake-input"></div><div class="fake-button"></div></div></form></div></div><p><strong>6. Operations &#8212; what happens if your AI vendor pushed a silent update tonight, </strong>would you find out from your own monitoring &#8212; or from your customers?<strong> </strong>One retailer only discovered its personalisation engine had quietly changed pricing logic after a routine vendor patch when margin fell two points, unexplained, in a single quarter. A yearly continuity test doesn&#8217;t catch a system that changes behaviour on a Tuesday night without telling you.</p><p><strong>7. Reputation &#8212; one failure erases ten wins.</strong> AI failures are reputationally asymmetric. One unfair decision, one leaked dataset, one deepfake incident, and the value created by ten well-governed use cases evaporates. Trust is a board asset. Ethics has to be a control, not a communications line.</p><p><strong>8. Talent &#8212; job enrichment vs displacement?</strong> Adoption without redesigning how the work gets done, lacking AI Literacy beyond the tech team. No incentives tied to value capture. Questions many boards are now asking - What is our AI workforce strategy? How are we measuring impact on jobs? What is our AI literacy baseline - for Colleagues, Executives &amp; Directors? How can we deploy talent, rebundle &#8216;tasks&#8217;, build a new organisation model with different spans of control - with humans managing agents?</p><p><strong>9. Concentration &#8212; it&#8217;s no longer just about &#8216;which model do we use&#8221;.</strong> It&#8217;s about whether a single government decision, vendor pivot or API or token price change could disable critical workflows overnight or make them uneconomic? Most third-party due diligence never asks about model provenance, change notification or sub-processor chains. Does the Board know where concentration risks lie, how quickly can we substitute and what&#8217;s the impact?</p><p><strong>10. Economics &#8212; the money blows up quietly.</strong> Also new, and increasingly the one investors ask about. AI cost is now tied to physical infrastructure &#8212; compute, chips, power &#8212; and token pricing that can move under your business case. Meanwhile most enterprises are funding pilot portfolios with no stop/go criteria and no measured return. Capital committed to AI should face the same discipline as any strategic capex/opex: stage gates, downside cases, explicit return thresholds. Uber recently announced it burnt through its entire 2026 AI coding budget in four months and moved to cap token usage after the horse had bolted.</p><p>A board that checks in once a quarter cannot govern a system that changes every day. Today only 39% of Fortune 100 boards have any form of AI oversight &#8212; a committee, a director with the expertise, an ethics board. Only 6% have management reporting that goes beyond adjectives. That&#8217;s not a knowledge gap.</p><p>The uncomfortable close: none of the ten requires the AI to fail. Half of them detonate when the AI works exactly as designed &#8212; on the wrong data, at the wrong speed, under the wrong ownership, or at a price that no longer makes sense. <a href="https://www.thedirectorbrief.com/p/the-governance-fix-not-a-tenth-committee">How to fix it  </a></p><div class="captioned-button-wrap" data-attrs="{&quot;url&quot;:&quot;https://www.thedirectorbrief.com/p/ten-ways-ai-can-blow-up-your-business?utm_source=substack&utm_medium=email&utm_content=share&action=share&quot;,&quot;text&quot;:&quot;Share&quot;}" data-component-name="CaptionedButtonToDOM"><div class="preamble"><p class="cta-caption">Thanks for reading The Director Brief! To help build the community feel free to share</p></div><p class="button-wrapper" data-attrs="{&quot;url&quot;:&quot;https://www.thedirectorbrief.com/p/ten-ways-ai-can-blow-up-your-business?utm_source=substack&utm_medium=email&utm_content=share&action=share&quot;,&quot;text&quot;:&quot;Share&quot;}" data-component-name="ButtonCreateButton"><a class="button primary" href="https://www.thedirectorbrief.com/p/ten-ways-ai-can-blow-up-your-business?utm_source=substack&utm_medium=email&utm_content=share&action=share"><span>Share</span></a></p></div><p></p>]]></content:encoded></item><item><title><![CDATA[Your board isn’t slow on AI. Maybe it's flying blind at speed?]]></title><description><![CDATA[A new framework to avoid the trap & 10 questions every board should be asking?]]></description><link>https://www.thedirectorbrief.com/p/your-board-isnt-slow-on-ai-its-flying</link><guid isPermaLink="false">https://www.thedirectorbrief.com/p/your-board-isnt-slow-on-ai-its-flying</guid><dc:creator><![CDATA[Dharmash Mistry]]></dc:creator><pubDate>Thu, 25 Jun 2026 13:39:36 GMT</pubDate><enclosure url="https://substackcdn.com/image/fetch/$s_!UVmC!,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Fdd1c6d38-45f3-4f2b-ae33-89630455640d_1672x941.png" length="0" type="image/jpeg"/><content:encoded><![CDATA[<h1>The finding that should stop every Chair in their tracks</h1><p>A BCG survey of 625 CEOs and board members published last month (May 2026) found that 61% of CEOs believe their boards are rushing AI transformation. Not dragging their feet. Rushing it.</p><p>The explanation buried in the data is worse than the headline: the directors with the lowest confidence in their own AI knowledge are the most likely to believe their organisation is moving too slowly.&#185;</p><blockquote><p><em><strong><span>The directors who understand AI least are the ones pushing hardest for speed.</span></strong></em></p></blockquote><p>This inverts the conventional narrative &#8212; that boards are too cautious, too analogue, too late for the AI moment. The 2026 evidence says something more uncomfortable: boards are not behind AI. Some are ahead of what they understand. And that combination &#8212; urgency without literacy, momentum without oversight &#8212; is precisely how consequential decisions can get made badly, and at scale.</p><p><strong><span>The Stat This Week</span></strong><span><br></span><em><span>61% of CEOs say their boards are rushing AI transformation &#8212; and directors with the lowest AI literacy are the most likely to believe they are moving too slowly. Urgency is being generated by uncertainty, not by analysis. (BCG, May 2026, n=625.)</span></em></p><h1>The silence in the room</h1><p>The history of disruption rhymes. The pattern is common: creative destruction gets treated as business-as-usual until it isn&#8217;t. Have you sat in meetings approving AI spend with no clear value logic, approving the tech stack without challenging the design choices, treating AI governance as a checklist, measuring success by pilots or tokens, accepting &#8216;human oversight&#8217; without testing if it&#8217;s for real? No need to put your hand up. </p><p>Are we asking the right strategic and governance questions of a technology now reshaping how organisations fundamentally compete and operate &#8212; price, recruit, source, credit-check, market &#8212; where <em>agents, not humans</em>, are increasingly making the decisions?</p><p>The question that matters most:</p><blockquote><p><em><strong><span>If a well-capitalised competitor rebuilt our core product around AI in the next eighteen months, what would remain of our competitive position?</span></strong></em></p></blockquote><p>That absence of that question that wasn&#8217;t on the agenda is the governance gap. Not speed. Not caution. </p><p>The numbers no longer allow a comfortable interpretation</p><p>Two findings now sit alongside each other in a way the boardroom cannot ignore.</p><p><strong>Deployment is happening regardless of readiness. </strong>Grant Thornton&#8217;s 2026 AI Impact Survey finds nearly three in four organisations are giving agentic AI access to their systems and processes &#8212; piloting, scaling or running it in production. Just 20% have a tested AI incident response plan for when it fails.&#178;</p><p><strong>Capital is moving at the same speed. </strong>BCG&#8217;s AI Radar finds corporations expect to lift AI spending from 0.8% to 1.7% of revenues in 2026, with more than half directed at agentic systems.&#179; These are not experimental budgets. They are material capital commitments made into a technology most boards do not yet have the fluency to interrogate.</p><div class="captioned-image-container"><figure><a class="image-link image2 is-viewable-img" target="_blank" href="https://substackcdn.com/image/fetch/$s_!UVmC!,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Fdd1c6d38-45f3-4f2b-ae33-89630455640d_1672x941.png" data-component-name="Image2ToDOM"><div class="image2-inset"><picture><source type="image/webp" srcset="https://substackcdn.com/image/fetch/$s_!UVmC!,w_424,c_limit,f_webp,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Fdd1c6d38-45f3-4f2b-ae33-89630455640d_1672x941.png 424w, https://substackcdn.com/image/fetch/$s_!UVmC!,w_848,c_limit,f_webp,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Fdd1c6d38-45f3-4f2b-ae33-89630455640d_1672x941.png 848w, https://substackcdn.com/image/fetch/$s_!UVmC!,w_1272,c_limit,f_webp,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Fdd1c6d38-45f3-4f2b-ae33-89630455640d_1672x941.png 1272w, https://substackcdn.com/image/fetch/$s_!UVmC!,w_1456,c_limit,f_webp,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Fdd1c6d38-45f3-4f2b-ae33-89630455640d_1672x941.png 1456w" sizes="100vw"><img src="https://substackcdn.com/image/fetch/$s_!UVmC!,w_1456,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Fdd1c6d38-45f3-4f2b-ae33-89630455640d_1672x941.png" width="1456" height="819" data-attrs="{&quot;src&quot;:&quot;https://substack-post-media.s3.amazonaws.com/public/images/dd1c6d38-45f3-4f2b-ae33-89630455640d_1672x941.png&quot;,&quot;srcNoWatermark&quot;:null,&quot;fullscreen&quot;:null,&quot;imageSize&quot;:null,&quot;height&quot;:819,&quot;width&quot;:1456,&quot;resizeWidth&quot;:null,&quot;bytes&quot;:2425104,&quot;alt&quot;:null,&quot;title&quot;:null,&quot;type&quot;:&quot;image/png&quot;,&quot;href&quot;:null,&quot;belowTheFold&quot;:true,&quot;topImage&quot;:false,&quot;internalRedirect&quot;:&quot;https://www.thedirectorbrief.com/i/203552260?img=https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Fdd1c6d38-45f3-4f2b-ae33-89630455640d_1672x941.png&quot;,&quot;isProcessing&quot;:false,&quot;align&quot;:null,&quot;offset&quot;:false}" class="sizing-normal" alt="" srcset="https://substackcdn.com/image/fetch/$s_!UVmC!,w_424,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Fdd1c6d38-45f3-4f2b-ae33-89630455640d_1672x941.png 424w, https://substackcdn.com/image/fetch/$s_!UVmC!,w_848,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Fdd1c6d38-45f3-4f2b-ae33-89630455640d_1672x941.png 848w, https://substackcdn.com/image/fetch/$s_!UVmC!,w_1272,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Fdd1c6d38-45f3-4f2b-ae33-89630455640d_1672x941.png 1272w, https://substackcdn.com/image/fetch/$s_!UVmC!,w_1456,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Fdd1c6d38-45f3-4f2b-ae33-89630455640d_1672x941.png 1456w" sizes="100vw" loading="lazy"></picture><div class="image-link-expand"><div class="pencraft pc-display-flex pc-gap-8 pc-reset"><button tabindex="0" type="button" class="pencraft pc-reset pencraft icon-container restack-image"><svg aria-hidden="true" width="20" height="20" viewBox="0 0 20 20" fill="none" stroke-width="1.5" stroke="var(--color-fg-primary)" stroke-linecap="round" stroke-linejoin="round" xmlns="http://www.w3.org/2000/svg"><g><path d="M2.53001 7.81595C3.49179 4.73911 6.43281 2.5 9.91173 2.5C13.1684 2.5 15.9537 4.46214 17.0852 7.23684L17.6179 8.67647M17.6179 8.67647L18.5002 4.26471M17.6179 8.67647L13.6473 6.91176M17.4995 12.1841C16.5378 15.2609 13.5967 17.5 10.1178 17.5C6.86118 17.5 4.07589 15.5379 2.94432 12.7632L2.41165 11.3235M2.41165 11.3235L1.5293 15.7353M2.41165 11.3235L6.38224 13.0882"></path></g></svg></button><button tabindex="0" type="button" class="pencraft pc-reset pencraft icon-container view-image"><svg xmlns="http://www.w3.org/2000/svg" width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="lucide lucide-maximize2 lucide-maximize-2"><polyline points="15 3 21 3 21 9"></polyline><polyline points="9 21 3 21 3 15"></polyline><line x1="21" x2="14" y1="3" y2="10"></line><line x1="3" x2="10" y1="21" y2="14"></line></svg></button></div></div></div></a></figure></div><h1>What changes when the actor isn&#8217;t a person</h1><p>Today&#8217;s operating model rests on a hidden assumption: the actor executing a decision is a human who can be instructed, supervised, slowed down and held to account. Once decisions and actions are delegated to autonomous agents &#8212; pricing engines, customer-routing models, recruitment screens, refund bots, credit-check agents &#8212; that assumption breaks. And once it breaks, the substance of executive &amp; board responsibility changes with it.</p><p><strong>Governance</strong> moves from directing human actors making occasional, reviewable decisions to deciding how much agency to delegate to a non-human actor in the first place. <strong>Risk</strong> moves from slow, visible and auditable-after-the-fact to fast, opaque and emergent &#8212; errors propagating at machine speed before controls catch them. <strong>Controls</strong> move from detective to preventive, embedded (in the code) and real-time &#8212; hard caps, whitelists, kill switches built inside the agent. <strong>Compliance</strong> moves from periodic and sample-based to continuous and designed-in. <strong>Assurance</strong> moves from tracing the decision to validating the guardrails under stress, because the reasoning isn&#8217;t transparent. <strong>Accountability</strong> stays exactly where it has always sat &#8212; with a named human &#8212; because it can never transfer to the agent.</p><p>The new first-order board question is no longer <em>&#8220;how much risk are we willing to take?&#8221;</em> It is <em><strong>&#8220;how much agency are we willing to delegate?&#8221;</strong></em> &#8212; where agents may act autonomously, recommend-only, or are banned outright; each with a named human owner; each with a tested kill switch.</p><blockquote><p><em><strong><span>AI doesn&#8217;t replace the board&#8217;s duties. It raises the metabolic rate at which they must be discharged.</span></strong></em></p></blockquote><h1>We have been here before &#8212; and we didn&#8217;t learn the right lesson</h1><p>When the internet arrived, large incumbent organisations appointed Chief Digital Officers. The CDO became the governance pressure valve &#8212; the person who ran the digital programme, attended the right conferences, brought in an army of vendors, seeded experiments and then asked to launch a venture fund. Boards called it digital strategy. Meanwhile insurgent entrepreneurs backed by smart VC money went directly after their core profit pools &#8212; reinventing the economic model, new distribution, &#8216;product&#8217; as marketing, disciplined quarterly sprints, real-time customer metrics, not waterfall two-year IT projects out of date at the point of committing funds. Reinvention using technology, not technology applied to what they already did.</p><p>The companies that navigated that transition had something different: a willingness to self-disrupt &#8212; challenging their own legacy economics before someone else did &#8212; and boards and management teams who took a long view of what technology might do to their market, treated governance as part of product quality, and were clear about the problem they were solving and why their solution was 50%+ better. The best live example today is Google, managing an AI transition where Search still accounts for over $225 billion &#8212; more than 55% of total revenues. </p><p>Stripe and Square went after incumbents&#8217; payment economics; Spotify rebuilt music distribution around access, not ownership; Airbnb did the same to hotels&#8217; fixed-cost economics. On the other side of those bets sat the boards that watched it happen &#8212; Kodak, Blockbuster, Nokia, BlackBerry, Sears &#8212; others will follow. The governance failure was not a failure to understand technology. It was a failure to understand what technology did &#8212; to competitive dynamics, to cost structures, to who controlled the customer relationship. Crucially, digital was the CEO&#8217;s job, treated as a cross-business imperative with a board-level strategy. Not delegated to one function. Not run as an IT project.</p><p>The same structural deficit is repeating itself. We are, in 2026, roughly where we were in 2000 &#8212; the difference is that the cycle is compressed, the capital commitments are larger, and the competitive and regulatory environment is hardening.</p><h1>The Four-Domain Frame &#8212; the navigation grammar</h1><p>Stripped back to first principles, the WEF Oversight Toolkit, KPMG/INSEAD&#8217;s Global Principles, McKinsey&#8217;s AI Trust framework and BCG&#8217;s board guidance converge on &#8216;four domains&#8217; a board must now own at the same time:</p><div class="captioned-image-container"><figure><a class="image-link image2 is-viewable-img" target="_blank" href="https://substackcdn.com/image/fetch/$s_!b10u!,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F95ce4ce2-234f-4692-8f27-ea018a5e0ddd_4056x2057.png" data-component-name="Image2ToDOM"><div class="image2-inset"><picture><source type="image/webp" srcset="https://substackcdn.com/image/fetch/$s_!b10u!,w_424,c_limit,f_webp,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F95ce4ce2-234f-4692-8f27-ea018a5e0ddd_4056x2057.png 424w, https://substackcdn.com/image/fetch/$s_!b10u!,w_848,c_limit,f_webp,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F95ce4ce2-234f-4692-8f27-ea018a5e0ddd_4056x2057.png 848w, https://substackcdn.com/image/fetch/$s_!b10u!,w_1272,c_limit,f_webp,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F95ce4ce2-234f-4692-8f27-ea018a5e0ddd_4056x2057.png 1272w, https://substackcdn.com/image/fetch/$s_!b10u!,w_1456,c_limit,f_webp,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F95ce4ce2-234f-4692-8f27-ea018a5e0ddd_4056x2057.png 1456w" sizes="100vw"><img src="https://substackcdn.com/image/fetch/$s_!b10u!,w_1456,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F95ce4ce2-234f-4692-8f27-ea018a5e0ddd_4056x2057.png" width="1456" height="738" data-attrs="{&quot;src&quot;:&quot;https://substack-post-media.s3.amazonaws.com/public/images/95ce4ce2-234f-4692-8f27-ea018a5e0ddd_4056x2057.png&quot;,&quot;srcNoWatermark&quot;:null,&quot;fullscreen&quot;:null,&quot;imageSize&quot;:null,&quot;height&quot;:738,&quot;width&quot;:1456,&quot;resizeWidth&quot;:null,&quot;bytes&quot;:619024,&quot;alt&quot;:null,&quot;title&quot;:null,&quot;type&quot;:&quot;image/png&quot;,&quot;href&quot;:null,&quot;belowTheFold&quot;:true,&quot;topImage&quot;:false,&quot;internalRedirect&quot;:&quot;https://www.thedirectorbrief.com/i/203552260?img=https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F95ce4ce2-234f-4692-8f27-ea018a5e0ddd_4056x2057.png&quot;,&quot;isProcessing&quot;:false,&quot;align&quot;:null,&quot;offset&quot;:false}" class="sizing-normal" alt="" srcset="https://substackcdn.com/image/fetch/$s_!b10u!,w_424,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F95ce4ce2-234f-4692-8f27-ea018a5e0ddd_4056x2057.png 424w, https://substackcdn.com/image/fetch/$s_!b10u!,w_848,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F95ce4ce2-234f-4692-8f27-ea018a5e0ddd_4056x2057.png 848w, https://substackcdn.com/image/fetch/$s_!b10u!,w_1272,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F95ce4ce2-234f-4692-8f27-ea018a5e0ddd_4056x2057.png 1272w, https://substackcdn.com/image/fetch/$s_!b10u!,w_1456,c_limit,f_auto,q_auto:good,fl_progressive:steep/https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2F95ce4ce2-234f-4692-8f27-ea018a5e0ddd_4056x2057.png 1456w" sizes="100vw" loading="lazy"></picture><div class="image-link-expand"><div class="pencraft pc-display-flex pc-gap-8 pc-reset"><button tabindex="0" type="button" class="pencraft pc-reset pencraft icon-container restack-image"><svg aria-hidden="true" width="20" height="20" viewBox="0 0 20 20" fill="none" stroke-width="1.5" stroke="var(--color-fg-primary)" stroke-linecap="round" stroke-linejoin="round" xmlns="http://www.w3.org/2000/svg"><g><path d="M2.53001 7.81595C3.49179 4.73911 6.43281 2.5 9.91173 2.5C13.1684 2.5 15.9537 4.46214 17.0852 7.23684L17.6179 8.67647M17.6179 8.67647L18.5002 4.26471M17.6179 8.67647L13.6473 6.91176M17.4995 12.1841C16.5378 15.2609 13.5967 17.5 10.1178 17.5C6.86118 17.5 4.07589 15.5379 2.94432 12.7632L2.41165 11.3235M2.41165 11.3235L1.5293 15.7353M2.41165 11.3235L6.38224 13.0882"></path></g></svg></button><button tabindex="0" type="button" class="pencraft pc-reset pencraft icon-container view-image"><svg xmlns="http://www.w3.org/2000/svg" width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="lucide lucide-maximize2 lucide-maximize-2"><polyline points="15 3 21 3 21 9"></polyline><polyline points="9 21 3 21 3 15"></polyline><line x1="21" x2="14" y1="3" y2="10"></line><line x1="3" x2="10" y1="21" y2="14"></line></svg></button></div></div></div></a></figure></div><p><strong><span>The Four-Domain Frame</span></strong><em><span> - </span></em>Most boards govern one of these well. A few govern two. Not many govern all four simultaneously &#8212; this is not a surprise in a fast moving world of ambiguity, hype and uncertain outcomes. Nevertheless, the discipline is important.</p><p>The ten questions every board should be asking sit across the four domains. Each carries a consequence: the cost of it going unasked. That cost is the point.</p><div class="subscription-widget-wrap-editor" data-attrs="{&quot;url&quot;:&quot;https://www.thedirectorbrief.com/subscribe?&quot;,&quot;text&quot;:&quot;Subscribe&quot;,&quot;language&quot;:&quot;en&quot;}" data-component-name="SubscribeWidgetToDOM"><div class="subscription-widget show-subscribe"><div class="preamble"><p class="cta-caption">Thanks for reading The Director Brief! Subscribe for free to receive new posts</p></div><form class="subscription-widget-subscribe"><input type="email" class="email-input" name="email" placeholder="Type your email&#8230;" tabindex="-1"><input type="submit" class="button primary" value="Subscribe"><div class="fake-input-wrapper"><div class="fake-input"></div><div class="fake-button"></div></div></form></div></div><h2>Strategy &amp; Innovation</h2><p><strong><span>1. </span>If a well-capitalised competitor rebuilt our core product around AI in the next eighteen months, what would remain of our competitive position?</strong></p><p>Most boards govern AI risk inside the existing business. Not many ask the disruption question &#8212; not whether AI creates risk in our operations, but whether it lets a rival make our operations irrelevant. Management is paid to defend the model that exists. The board owns the question of whether that model survives.</p><p><strong><span>2. </span>Is our AI investment buying competitive advantage &#8212; or operational parity that every rival will also reach?</strong></p><p>Boards are approving AI spending that doubles in a single year. The right governance question is not how much. It is what for. Efficiency gains from AI are real and accessible to every competitor. The organisations building durable advantage are redefining the product, the customer relationship or the cost architecture in ways that are hard to replicate. Does the board know which category its spend falls into?</p><p><strong><span>3. </span>Is AI changing how this organisation makes decisions &#8212; or simply automating the decisions it already makes?</strong></p><p>This is the line that separates real transformation from expensive process improvement. Most organisations use AI to do existing things faster. Fewer use it to do things differently &#8212; to make decisions with information they could not previously access, at speeds the operating model precluded, at a level of personalisation the old margin structure could not support. The board should know which category describes its programme.</p><h2>Risk &amp; Resilience</h2><p><strong><span>4. </span>What is our AI risk framework built to catch &#8212; and what is it structurally incapable of seeing?</strong></p><p>Risk frameworks identify the risks they were designed to identify. AI introduces categories no pre-AI framework was built to surface: emergent model behaviour, training-data bias at scale, adversarial manipulation, hallucination in high-stakes outputs, and &#8212; new in 2026 &#8212; agentic systems taking sequences of autonomous decisions across connected processes. An audit committee receiving a RAG status update on AI risk is not governing AI risk. It is receiving a summary of classified risks &#8212; which is a different thing entirely.</p><p><strong><span>5. </span>How much agency have we delegated to non-human actors &#8212; and did we decide that, or has it happened to us?</strong></p><p>Three in four organisations now give agentic AI access to their systems; only one in five has tested what happens when it fails.&#178; The board&#8217;s instinct is to ask how much risk. The question that survives the next two years is how much agency. For every material AI use case &#8212; pricing, credit, recruitment, customer routing, supply chain, refund handling &#8212; there are three possible answers: autonomous, recommend-only, prohibited. Each with a named human owner. Each with a tested kill switch. </p><h2>Governance &amp; Accountability</h2><p><strong><span>6. </span>Where does accountability sit when an AI-driven decision causes harm &#8212; and has the board formally assigned it to a named human?</strong></p><p>This is not hypothetical. The EU AI Act&#8217;s requirements are now effective across European markets. The FCA&#8217;s AI governance expectations are hardening. D&amp;O exposure on AI-related harm is live and being tested. Most boards have not formally assigned AI accountability &#8212; not in committee terms of reference, not in management responsibilities, not in the schedule of matters reserved. Accountability never transfers to the agent. The answer, when it matters, will be found in what was documented. Not in what was assumed.</p><p><strong><span>7. </span>Is AI a standing item on the board agenda &#8212; or does it appear only when something goes wrong or management asks for a budget?</strong></p><p>Reactive governance is incident response with a board letterhead. The boards building real oversight treat AI as a live strategic conversation &#8212; at the frequency and seriousness of financial performance &#8212; not as a technology update in the CTO&#8217;s slot once a quarter.</p><h2>Capability &amp; Culture</h2><p><strong><span>8. </span>Are we asking management the questions that matter &#8212; or the questions management has prepared us to ask?</strong></p><p>This is the meta-question, and the one I find most difficult to answer honestly about my own contribution. When I have been on the presenting side of the table, I knew which questions were coming. I had prepared answers. The questions I had not prepared for were the ones that changed the dynamic &#8212; and they were almost never on the agenda. The BCG finding cuts both ways: if boards are pushing faster than management, the question is whether that pressure is informed or anxious. Governance is not about speed. It is about the quality of the decision.</p><p><strong><span>9. </span>Who in this boardroom has used an AI tool to do something consequential in the last thirty days?</strong></p><p>I include myself in this question. If your understanding of AI is entirely briefing-derived, your pressure for speed cannot be informed. The board cannot meaningfully challenge management&#8217;s AI strategy if its understanding of AI is entirely second-hand. This is not about becoming data scientists. It is the same standard of practical engagement expected of any director overseeing a material business transformation. The board that governed digital without digital experience was the first wave&#8217;s structural error. Repeating it knowingly is harder to excuse.</p><p><strong><span>10. </span>Do we have the board composition to govern the company we are building &#8212; not just the one we have?</strong></p><p>The NomCo&#8217;s job has always been to ensure the board has the skills the strategy requires. If the strategy now includes material AI transformation, agentic systems deployment and regulatory navigation under the EU AI Act, the skills required have changed. Not more technologists &#8212; more directors with the economic intuition to read what AI does to competitive dynamics, cost structures and the value of human judgment. A board effectiveness review that does not address this is answering the wrong question.</p><p></p><blockquote><p><em><strong><span>Effective AI governance is not a framework. It is a quality of attention &#8212; and the willingness to ask the question that was not prepared for.</span></strong></em></p></blockquote><h1>Before your next board meeting</h1><p>Of the ten questions above, which three would most change your board&#8217;s current AI conversation? </p><div><hr></div><h2>This week in The Library</h2><p><em><strong><a href="https://www.thedirectorbrief.com/p/your-ai-governance-isnt-an-it-policy">Your AI governance isn&#8217;t an IT policy. That&#8217;s why it&#8217;s failing.</a> </strong>The companion to this Manifesto &#8212; the framework, the board&#8217;s four jobs and the six diagnostic questions that test whether your governance is real. Read after this.</em></p><h2>Next week in The Frame</h2><p>Next week we discuss <a href="https://www.thedirectorbrief.com/p/ten-ways-ai-can-blow-up-your-business">10 ways AI can blow up your business. </a>In a world where AI is probabilistic, it doesn&#8217;t sit still &amp; it moves at machine speed - what are the risks and what is the emerging augmentation to the traditional governance model.  </p><p><strong>Disclaimer</strong>: These are my personal views, shaped in a fast-moving environment and open to revision. They should not be taken as representing the perspectives of any boards or advisory roles, past or present.</p><div><hr></div><p><strong>TheDirectorBrief</strong> What you get. Free, each week. Thirty minutes:</p><ul><li><p><em><strong>A practical discussion of an AI related topic</strong></em>, centered on strategy, risk, governance &amp; capability. A decision useful take - with examples, facts, useful frameworks and key questions to ask. Exposes common misconceptions and cuts through the hype <strong>(The Frame)</strong></p></li><li><p><em><strong>Five board-ready questions</strong></em> for your next meeting <strong>(Five for the Chair)</strong></p></li><li><p><em><strong>Curated decision ready AI news</strong></em>. What you need to know, why it matters and how you might factor into decision making <strong>(The Signal) </strong></p></li><li><p> <strong>Practical tools, how to guides</strong>, primers and prompts ready to (customise &amp;) use in your business. <strong>(The Library)</strong></p></li><li><p> <strong>AI education for board directors</strong>  What to play with, build, read, watch or listen to. Not one off. Building AI fluency on going. <strong>(Monday morning)</strong></p><p><strong>Signal, not noise. Judgement, not updates.</strong></p><p></p></li></ul><p><em>Subscribe free at <strong><a href="https://www.thedirectorbrief.com/">TheDirectorBrief.com</a></strong> &#8212; or reply to this email. I read every response.</em></p><h2>Sources</h2><p>1. BCG, AI in the Boardroom, May 2026 &#8212; survey of 625 CEOs and board members. </p><p>2. Grant Thornton, 2026 AI Impact Survey &#8212; agentic AI deployment and incident response readiness. </p><p>3. BCG, AI Radar 2026 &#8212; corporate AI spend as percentage of revenue. </p><p>Performance reference: MIT CISR, Board Digital Fluency and Performance, March 2025 &#8212; AI-fluent boards outperform peers by 10.9 percentage points in ROE; non-fluent boards trail by 3.8%. Carried in The Library&#8217;s board-effectiveness primer. </p><p>Frameworks referenced: WEF AI Governance Toolkit (2024&#8211;25); KPMG/INSEAD Global AI Governance Principles (April 2026); McKinsey, State of AI Trust 2026 &#8212; Shifting to the Agentic Era; BCG AI Radar 2026. Agentic governance logic drawn from working paper Governing AI Agents in the Enterprise (Library, May 2026). </p>]]></content:encoded></item></channel></rss>