Podcast
Closing the AI Governance Gap
AI adoption is outpacing governance at most organizations. In the 2026 Travelers Risk Index, 89% of business leaders surveyed report some portion of their workforce uses AI tools on a day-to-day basis – but only 59% report their organizations have established business practices for employees’ use of AI. Lauren Winchester, Head of Cyber Risk Services at Travelers, joined Travelers Institute AVP Jesse Sugarman to explain what this gap means for businesses and how leaders can get ahead of the risk.
Drawing on findings from the Travelers AI Risk Assessment, Lauren walks through the most common governance blind spots, the questions every organization should be asking before deploying AI tools and a practical framework for building the oversight structures that responsible AI adoption requires.
This episode is part of a special cyber podcast series of the Travelers Institute Risk & Resilience podcast. This program is presented as part of the Travelers Institute’s Cyber: Prepare, Prevent, Mitigate, Restore® initiative, which promotes dialogue and education to help leaders prepare for and respond to cyber incidents.
Travelers works to make its content accessible to all, including those with disabilities. A transcript of this program will be posted here shortly. If you have questions, please call or email us at 866.336.2077 or [email protected].
This episode is also available on Apple Podcasts®.
Subscribe
Key takeaways
- The bigger AI governance risk for most organizations right now isn’t an outside attack – it’s the gap between how employees are already using AI and what their companies actually know about it.
- Employees don’t need bad intentions to create a data privacy risk. Putting sensitive company or customer information into a public AI model, without knowing the implications, can rise to the level of a reportable breach.
- AI guidelines sitting in a folder isn’t a governance program. Training is what makes it real, and companies don’t need an elaborate or expensive approach to make it effective.
- Every organization, regardless of size or industry, needs a designated owner for AI governance. Without it, no one is tracking what tools are in use, what data is flowing into them or what the exposure might be.
- For companies further along in their AI journey, keeping humans in the loop at critical decision points – and revisiting governance guidelines regularly as the technology evolves – is where the focus needs to be.
Travelers Institute Risk & Resilience podcast
Subscribe on LinkedIn® (Opens in a new window)
The Travelers Institute Risk & Resilience podcast is available on Spotify and Apple Podcasts®. Subscribe today to be alerted when new episodes are released.
Related content
Episode one
AI’s Impact on Cyber Vulnerability and Defense
Lauren Winchester, Head of Cyber Risk Services, Travelers, joined Jesse Sugarman, AVP, Travelers Institute®, to explore how AI is reshaping vulnerability discovery, detection and patching – for both defenders and attackers – and what steps security teams can take to stay a step ahead.
In the news
Digital Insurance
UserFriendly 2.0
FOX23 News
Join our mailing list
Invitations, event announcements, replays and more — delivered to you.
Sign up