As organisations across South Africa and the broader continent race to adopt AI, from customer service chatbots to fraud detection models to generative tools embedded in daily operations, few have paused to ask who is governing these systems, what data they touch, and what happens when they fail. This keynote will argue that ungoverned AI adoption is quietly becoming the next major cybersecurity crisis: a threat vector hiding in plain sight, expanding faster than most institutions' policies, oversight structures, or regulatory frameworks can keep pace with. Drawing on BCF's work advising government, healthcare, and financial services clients across U.S. and African markets, Dr Robinson will make the case that AI governance is not a compliance afterthought, it is now core infrastructure security.

For a South African audience navigating POPIA compliance, sector-specific regulation, and an accelerating AI adoption curve, this keynote connects global lessons in AI risk to local realities, equipping leaders to build governance structures now, before incidents force their hand.

• Shadow AI is the new shadow IT — Employees and departments are adopting AI tools faster than security and legal teams can vet them, creating unmonitored data flows and unmanaged risk across the enterprise.
• Data governance is AI governance — For South African organisations, POPIA compliance and AI oversight are inseparable; feeding sensitive or personal data into ungoverned models can quietly turn a productivity tool into a regulatory and security liability.
• AI systems are attack surfaces, not just tools — Model manipulation, data poisoning, and prompt injection are real, emerging threats; treating AI as "just software" ignores risks that traditional cybersecurity frameworks weren't built to catch.
• Governance Is a competitive advantage, not a constraint — Institutions that build clear AI policies, oversight committees, and accountability structures now will move faster and more safely than competitors scrambling to retrofit governance after a breach or regulatory action.

As organisations increasingly adopt AI, intelligent automation and autonomous business processes, boards are expected to provide effective oversight of technologies that can influence decisions, behaviours and risk exposure at unprecedented scale. While many organisations have established AI principles and policies, directors often lack practical mechanisms to determine whether technology is being used ethically, responsibly and in a manner that maintains stakeholder trust.

This presentation shares a South African case study on the development of an Information Services Ethical Behaviour Assurance Index (IS-EBAI), a board-level governance model designed to provide measurable assurance over the ethical use of technology, data and AI. The framework consolidates ten ethical governance dimensions into a single board reporting structure, including privacy, integrity, accountability, transparency, fairness, responsible AI and third-party stewardship.

The presentation demonstrates how complex technology and AI risks can be translated into meaningful board assurance indicators, supported by evidence-based reporting, governance thresholds and escalation mechanisms. Delegates will gain practical insight into strengthening board oversight of AI-enabled decisions, balancing innovation with trust, and preparing for the evolving future of technology governance in South Africa.

Key Delegate Takeaways

• A practical approach to transforming AI and technology ethics principles into measurable board assurance.
• A reusable governance framework that enables directors to oversee intelligent enterprises with greater confidence.
• Practical lessons on balancing innovation, competitiveness and responsible technology governance while maintaining organisational trust.