AI and Information Governance Are We Asking the Right Question if the Result Is 42?
- Sue Burton
- Mar 31
- 1 min read

AI tools can produce fast, polished and confident answers. That does not automatically mean an organisation is asking the right questions, using the right information, or managing the result appropriately.
Before adopting AI more broadly, organisations should stop and consider a few governance questions.
1. Security and access
What information is being entered into AI tools, and who is authorised to enter it?
2. What are the tools learning?
What happens to prompts and outputs, and what settings or controls apply?
3. Is the answer a true representation of the question?
Does the response accurately reflect what was asked, and can it be relied upon?
4. What sources are being used?
If records are not digitised, accessible, or well managed, is the answer based on only part of the picture?
5. Recordkeeping
Where are prompts, outputs and resulting actions being saved if they contribute to business activity or decisions?
The issue is not only whether AI can provide an answer. The issue is whether the organisation has asked the right question, used appropriate information, applied proper controls, and managed the result in a way that supports security, accountability and sound information governance.
Information Threads Consulting supports organisations to examine the connection between AI use, information governance, records control and practical risk management.




Comments