Latest / C-Suite Perspectives / Are Companies Paying Enough Attention to AI Risks?
Transcript
- 0:00Steve Odland: Welcome to C-Suite Perspectives, a signature
- 0:02series by The Conference Board.
- 0:04I'm Steve Odland from The Conference Board and the host of this podcast
- 0:08series, and in today's conversation, we're going to talk about how
- 0:11businesses are grappling with AI risk.
- 0:15Joining me today is Dr. Andrew Jones, principal researcher
- 0:18at The Conference Board in our Governance & Sustainability Center.
- 0:23Andrew, welcome.
- 0:24Andrew Jones: Thanks so much, Steve.
- 0:25Great to be back with you again.
- 0:27Steve Odland: Andrew, you've written a new report, and it focuses on the S&P
- 0:31500, so the larger firms, but talk to us about the scope of what you looked at
- 0:39for AI disclosure, AI risk, and so forth.
- 0:42What does AI mean in this context?
- 0:45Andrew Jones: Yeah, sure.
- 0:45Happy to, Steve.
- 0:46And yeah, the Governance & Sustainability Center at The Conference Board put
- 0:49out some new research recently in a brand new report on how, as you said,
- 0:53S&P 500 companies are describing AI-related risks in the risk factors
- 0:59section of their annual SEC findings.
- 1:01That's their Form 10-K.
- 1:02We've looked back over the last few years, starting in 2023 all the way up to 2025.
- 1:07So, it's capturing the period where AI is quickly mainstreamed and
- 1:11been adopted by a lot of companies.
- 1:12And for those who don't know, the Form 10-K is, the risk factor
- 1:15section of it is a standardized, legally required disclosure meant to
- 1:19investors to material business risks.
- 1:21So a risk that a reasonable investor might consider important when making decisions.
- 1:25So looking at these risk disclosures can be a really valuable lens
- 1:29on how companies, how boards, how executives are thinking about risks,
- 1:33thinking about what's material, thinking about what's ahead, and how
- 1:36they're adapting their governance.
- 1:37And AI is obviously a really interesting area because of how quickly it's
- 1:41exploded in the last few years.
- 1:43It's quite a timely and quite an innovative study.
- 1:46No one else has really done this kind of work yet, and I think it
- 1:48only offers a window into how big companies are integrating AI into
- 1:53their frameworks, into their enterprise risk management frameworks, into
- 1:56their governance processes, and how it's becoming a key responsibility
- 2:00for both the C-Suite and the board.
- 2:02Steve Odland: So this study looked at the S&P 500 companies and their disclosures,
- 2:08what they've written about it.
- 2:10And so the scope of AI is whatever it was for that company that
- 2:14they deemed to be material right.
- 2:17Andrew Jones: That's right.
- 2:18It's a really good point that we talk about AI sometimes in this broad
- 2:20way, obviously under the umbrella of AI, of artificial intelligence.
- 2:24There's a lot of different technologies, different processes,
- 2:28different capabilities, right?
- 2:29Generative AI has obviously captured a lot of attention in the last few years,
- 2:33and some companies might have been disclosing about generative AI and those
- 2:36kind of models and what they mean, but also talk about other technologies, too,
- 2:39such as machine learning, deep learning, computer vision, predictive analytics.
- 2:45There's a lot of technologies here that together mark a new era of, I guess a new
- 2:49era of almost cognitive infrastructure, where AI is being embedded across
- 2:53functions and products and decisions.
- 2:56And companies are grappling with what that means, both internally for their
- 2:59workforce with operations, but also externally for their products and
- 3:02how they engage with their customers.
- 3:04Steve Odland: So basically, this isn't a laundry list of everything
- 3:09that they're doing in AI.
- 3:11This is essentially a disclosure, a legal disclosure, essentially, or a
- 3:16governance disclosure that informs investors and external parties what
- 3:21the risks are around their AI use.
- 3:24So it's not meant to be a catalog of anything, but tell us, what are the
- 3:27legal requirements for AI disclosure?
- 3:31Andrew Jones: Obviously, we've looked at Form 10-K filings, right?
- 3:34So this is a standardized, legally required annual report.
- 3:36And within that, companies are obliged, US public companies are obligated by the SEC,
- 3:42the Securities and Exchange Commission to disclose their material risks.
- 3:45So these are risks that a reasonable investor would consider important
- 3:48when making investment decisions.
- 3:50So in other words, meaning it could significantly affect a company's financial
- 3:54performance, operations, or reputation.
- 3:57Different companies and different industries obviously will be disclosing
- 3:59different kinds of things there.
- 4:00There might be some commonalities, but every company has its own sort
- 4:03of, I guess, its own risk exposure, its own sort of material issues.
- 4:08And AI is obviously starting to bubble up into that conversation, whereas
- 4:13companies integrate AI, whether it's into their operations or among their
- 4:17workforce, or entering into their products, it's raising new questions
- 4:20about risk, in terms of risks, whether AI systems fail or whether they misinform,
- 4:27or whether they perpetuate bias.
- 4:29And also the broader sort of sphere of risks attached to
- 4:33AI, related to regulations and litigation and investments.
- 4:36So there's a long list of things here, right?
- 4:38There's a broad universe of risk, but companies are obligated to disclose
- 4:42what they think is a material risk.
- 4:44And looking at these disclosures, therefore.
- 4:47we can see a lot of things, including, as you said, how
- 4:49companies perhaps are thinking about.
- 4:51Investor expectations, thinking about future legal exposure, thinking
- 4:56about how boards are approaching governance and oversight of AI.
- 5:00So it's a broad, it's one lens of many, but it is an important lens
- 5:03and an important window, I think.
- 5:05onto how companies are thinking about AI, and not just thinking
- 5:09about the opportunities of AI, but also the risks that can
- 5:13potentially materialize from that.
- 5:16Steve Odland: Now your report talks about the surge here in disclosures
- 5:20just since '23—'23, '24, '25.
- 5:23Talk about the percentage of companies now disclosing some sort of material
- 5:29risk for AI and how that's changed.
- 5:32And then, what does that mean about the rapid pace of AI adoption?
- 5:36Andrew Jones: Yeah, it's a really interesting finding.
- 5:38So we found as recently as 2023—we're talking two years ago, the 2023
- 5:42filing year—only 12% of the S&P 500 referred to AI at all in their risk.
- 5:48So, had at least one material, AI-related risk disclosure.
- 5:52This year, it's 72%.
- 5:54That's a rapid increase in a very short space of time.
- 5:57I think it just sort of really illustrates and underscores how AI has so quickly
- 6:01shifted from being something that's new, something that's shiny, something
- 6:05that's niche, something that's perhaps in is pilot stages, to really starting
- 6:08to be embedded in the enterprise.
- 6:10And companies across industries are starting to act on it and deploy it and
- 6:14invest it in and bring it into their compliance, into their operations,
- 6:17into their brand, into their products.
- 6:19So I think it just really illustrates how quickly that has happened.
- 6:22And perhaps also at the same time, given that we're talking here about
- 6:25risks, also about shows that we're at an important moment where boards and
- 6:29executives are starting to think more about, it's not just about opportunities.
- 6:33It's about the challenges associated with this now.
- 6:35And how do we govern and have oversight of AI in a way that is effective
- 6:40and efficient and responsible.
- 6:41So very, very quick surge, Steve, in AI.
- 6:45I think just illustrates that AI, it's on the table now.
- 6:48It's table stakes.
- 6:49It's in every conversation.
- 6:50And this is now a material risk for many companies.
- 6:53Steve Odland: And so as you look across the Fortune 500, the S&P 500, there's
- 6:58a lot of different sectors represented.
- 7:01Do you see any trends across sectors?
- 7:05Andrew Jones: We do.
- 7:05So when we break down data on S&P 500, we tend to slice into the 11 sectors
- 7:10that come under the GICS standard.
- 7:13So every public company is assigned to one of these 11 sectors.
- 7:16And the truth is, first of all, all sectors are disclosing on AI
- 7:19risk, as you can imagine, given how many we just spoke of are doing it.
- 7:22But this recent surge in disclosure is really concentrated in
- 7:26about four or five industries.
- 7:27And these are financials, health care, industrials, IT, so information
- 7:34technology, and consumer discretionary.
- 7:36So these are quite different kind of sets.
- 7:38There's obviously a lot of different companies under those five.
- 7:41But we feel that perhaps the reason why is they maybe share two traits,
- 7:45one of which is high data intensity.
- 7:49The second is direct human or regulatory exposure.
- 7:52So as AI is becoming embedded into decisions, these risks around bias and
- 7:58reliability and privacy and oversight have become financially material.
- 8:02So it's a broad thing, but it is interesting how it's a handful
- 8:06of sectors that have really led this charge so far, at least from
- 8:09a risk disclosure perspective.
- 8:11Steve Odland: It's interesting because I can't imagine any company not having
- 8:15some sort of AI deployment, whether it's just simply a large language
- 8:19model or use of ChatGPT for enhanced search or a little bit of Gen AI.
- 8:24But we talked about the surge, but the flip side is, you got 30% who are not
- 8:31disclosing anything as a material risk.
- 8:33What does that say?
- 8:35Andrew Jones: It's a really good point, yeah.
- 8:36But it's still, while 72% is a big number, there's still a significant number that
- 8:40aren't saying anything yet about AI risk.
- 8:42That's not to say they won't be soon.
- 8:44We attribute this to a few things.
- 8:45I think one, it might just be simply disclosures haven't
- 8:49caught up with practice yet.
- 8:50It'd be interesting to see what this number looks like next year.
- 8:53Some companies may also be still perhaps folding AI implicitly
- 8:58into other disclosures.
- 8:59So perhaps they talk about cybersecurity.
- 9:01They don't quite foreground the AI angle yet, but maybe that's coming.
- 9:06But we do expect this number to continue to grow, Steve.
- 9:09I think it will become just commonplace to acknowledge at least one, if not more,
- 9:14material AI risks in the years to come.
- 9:17Steve Odland: So if you think about, your point was that there are people
- 9:20who are, companies that are heavily tech-oriented or heavily regulated
- 9:23are the ones that lean a little bit more to the disclosure side.
- 9:27So you can see that with the banks that are heavily regulated.
- 9:31And so therefore, the disclosures are around trying to make sure
- 9:34that they don't get sued, they're following the laws on these things.
- 9:36And if your business is IT or AI-related, of course, your whole
- 9:41business model's predicated on it.
- 9:43What are the most common categories of AI risk that you see, now
- 9:47that we've looked at the sectors?
- 9:49Andrew Jones: We grouped every single AI risk disclosure into broad categories.
- 9:53These are broad categories that themselves have many subcategories, but we found
- 9:57three broad themes really dominated across the disclosures, and that was
- 10:01reputational risk, cybersecurity.
- 10:05and thirdly, legal and regulatory, and particularly regulatory.
- 10:08So these are broad categories, and we can go into what comes under them
- 10:11and what doesn't come under them.
- 10:12But yeah, these are really where companies' focus is trained, where
- 10:16they're really looking right now.
- 10:17Reputational risk, in particular, is the most common we found.
- 10:20About 40% of all S&P 500 firms disclose something relating to reputation this
- 10:25year, and that might encompass bias, it might encompass misinformation,
- 10:28might encompass privacy lapses.
- 10:31And so on.
- 10:31But other categories, very important, too.
- 10:34Steve Odland: Now, what kind of regulatory risk did you see disclosed here?
- 10:39I guess regulatory risk is always an issue in any company that follows regulations.
- 10:45And if you read the risk factors in these reports, you always see factors
- 10:52related to whatever industry they're in, that's tied to regulatory risk.
- 10:57So is a bunch of this just that there're new regulations and so therefore,
- 11:02companies feel obligated to do that?
- 11:04I'm trying to get to, how much of this is just process-oriented,
- 11:08regulatory-oriented, and how much of this is that the world has
- 11:11changed and we really have a more risky situation because of it?
- 11:16Andrew Jones: It's a really great question.
- 11:17I think on the one hand, you are right that there's always going to
- 11:20be an element of that, that there's always new regulations, right?
- 11:22There's always diverging regulations, there's always complexity and
- 11:26uncertainty around regulations.
- 11:28Thinking, for example, in the G&S Center, The Conference Board,
- 11:31we do a lot of work on ESG and sustainability disclosure regulations.
- 11:34And Steve, that is a huge sort of minefield and a rapidly evolving field.
- 11:37But I think when it comes to AI, there is something new, as well.
- 11:41And actually most of the risk disclosures that refer to regulations
- 11:45on AI typically refer to the challenges of uncertainty and the divergences
- 11:49between jurisdictions, and how difficult it is for firms to plan their AI
- 11:54deployments amid diverging frameworks.
- 11:57And particularly, the key divergence—particularly US terms and US
- 12:00multinationals—is between the EU, where you're seeing the EU AI Act starting
- 12:05to come in, it's really going to take force in the next couple of years, has
- 12:08quite big obligations on companies.
- 12:12And the US, which is a very different sort of approach where there isn't really
- 12:15a sort of unified federal law, but there is state-level regulations emerging,
- 12:20which is creating a kind of patchwork, and companies are struggling to navigate.
- 12:25So I think that's the really challenging thing about AI that,
- 12:28on the one hand, companies are in a rapid race to invest, to deploy, to
- 12:32integrate into their business, into their operations, into their products.
- 12:34But there's such uncertainty as to how to navigate these different regimes.
- 12:38And particularly, the US-EU divergence, that is probably only going to
- 12:43continue to grow in the years to come.
- 12:44Steve Odland: Yeah.
- 12:45It's a good point.
- 12:45A lot of these companies in the S&P 500 are multinational, and
- 12:50therefore it's not just a US issue.
- 12:53And so you've got different countries regulating in different fashions, and yet
- 12:58a company needs to act pretty consistently across all of their operations.
- 13:02So that's a challenge.
- 13:04But even in the US, these, as you said, these multi-state regulatory schemes are
- 13:09very difficult for companies to navigate.
- 13:12And it feels like these states should get together or the federal government
- 13:16should step in and homogenize these rules.
- 13:20Andrew Jones: You're so right, Steve, it's a real challenge where the EU
- 13:23effectively has created the world's first big comprehensive binding AI
- 13:28law, and it has all these different aspects and risk-tiered systems and
- 13:31all these disclosure obligations.
- 13:33Whereas, yeah, the US is different, and the federal government and the
- 13:38executive branch has very much emphasized innovation and infrastructure and
- 13:42global competitiveness and trying to have a light-touch regulatory approach.
- 13:46But yet the states, it's very different and different state laws.
- 13:49Some are very focused on specific issues, whether it's bias in
- 13:53employment or deepfake disclosure laws, but others are looking quite
- 13:57ambitious in their own right.
- 13:58I'm thinking, particularly, emerging regulatory frameworks in
- 14:01places like Colorado, California, Texas, very very ambitious, and
- 14:06have different kind of approaches and different levels of emphasis.
- 14:09And it's going to be difficult for companies to stay ahead of all of this
- 14:13in the next few years in a way that still allows them to be nimble and
- 14:16agile and compete and invest and deploy.
- 14:19So it's definitely, I think you can see that in the risk disclosures.
- 14:22As recently as a year or two ago, you didn't really see
- 14:25many disclosures about this.
- 14:26Now it's quickly emerging as a material issue.
- 14:29So I think it is definitely top of mind for boards and for C-Suites.
- 14:33Steve Odland: We're talking about AI risk in companies and disclosure.
- 14:36We're going to take a short break and be right back.
- 14:40Welcome back to C-Suite Perspectives.
- 14:43I'm your host, Steve Odland from The Conference Board, and I'm joined today
- 14:46by Dr. Andrew Jones, principal researcher in the Governance & Sustainability
- 14:51Center at The Conference Board.
- 14:53OK, Andrew, we're talking about your new paper, which our listeners can
- 14:57access on our website, TCB, and just click on the Governance & Sustainability
- 15:03Center, and they'll find your paper.
- 15:05It's a really interesting thing.
- 15:06Cybersecurity risks have been disclosed for a very long time, decades and
- 15:12decades, as digital transformation has come into the company since the 1970s.
- 15:19And I don't know, this sort of feels like just the next
- 15:23wave of digital transformation.
- 15:25AI is, at its root, it's software, right?
- 15:29It does then introduce a whole other layer of cybersecurity risk, too.
- 15:34Andrew Jones: It really does.
- 15:35And I think some of the cybersecurity risks being collected by
- 15:38companies are very interesting.
- 15:40And as I mentioned earlier in the podcast, cybersecurity risk was actually
- 15:43the second-most-disclosed category.
- 15:45About 20% of all S&P 500 firms both this year and last year said
- 15:50something about AI specifically, not just talking about cybersecurity in
- 15:53broad terms, AI specifically, and what it means for cybersecurity.
- 15:56And I think this is interesting, actually, most of those disclosures talk in general
- 16:01terms about how AI is effectively just massively complicating the whole
- 16:06issue of cyber risk and cybersecurity.
- 16:08The AI itself is a force multiplier that increases the scale, speed, and
- 16:14unpredictability of cyberattacks.
- 16:15And I think people, hostile actors can use AI to really just create
- 16:19much more sophisticated attacks, find those sort of surfaces to get in.
- 16:24At the same time also, the company's use of AI is itself inviting new
- 16:28kinds of challenges if hostile actors are able to, for example,
- 16:32inject prompts into their own system.
- 16:33So it's a real big concern, and I think this is something that's going to be, we
- 16:38expect this to grow more in visibility as we see high-profile incidents.
- 16:42And AI just, it just really complicates what was already a very challenging area.
- 16:47So a very interesting field, Steve, and something we'll be keeping a close eye on.
- 16:51Steve Odland: The Conference Board just released its latest CEO Confidence
- 16:55Index for the fourth quarter, and we asked about AI and adoption.
- 17:01And we asked specifically of CEOs what their organization's primary
- 17:05driver was for AI investment.
- 17:06And it came back that the number one driver for investment in AI was to drive
- 17:11cost reduction and operational efficiency.
- 17:14Number two was new product and service innovation.
- 17:17Three was customer experience enhancement.
- 17:20So, as you think about then risk disclosure, everything you've
- 17:23talked about follows that.
- 17:26The risks of, there's always the cybersecurity risk and people abusing
- 17:30AI tools, but the risk factors follow along these priorities for AI investment.
- 17:37Andrew Jones: They do.
- 17:38It's a really good point.
- 17:39I think it does, and I think it shows how, as companies scale up
- 17:43investment in those priorities, it also just creates or enhances
- 17:47or intensifies the risks, as well.
- 17:48And something we've heard a lot in our own engagements with chief legal
- 17:53officers, with heads of AI, with board directors, is how companies might
- 17:58benefit from differentiating between different types of AI and different
- 18:02types of uses from a risk perspective.
- 18:03So for example, if you have a consumer-facing AI product, perhaps
- 18:08you put a bit more emphasis and a bit more controls on that from a
- 18:11risk management perspective than you do from a workforce-facing product.
- 18:14Because obviously, the reputational implications of a failing,
- 18:18misinforming customers, or perpetuating bias is enormous.
- 18:22And companies I think are waking up to how AI does both intensify certain
- 18:28risks that are already there—thinking, for example, cybersecurity—and
- 18:31also maybe fundamentally change or introduce new risks at the same time.
- 18:35Steve Odland: It's interesting, we talked about the cybersecurity and
- 18:39regulatory risks, but early on, you mentioned reputational risks.
- 18:43What do you mean by that?
- 18:45Andrew Jones: So we found this is the most frequently disclosed AI category, right?
- 18:49And the truth is it's a broad category.
- 18:50It encompasses a lot of stuff.
- 18:52But reputational risk, I think just reflects how, when we talk about
- 18:55reputational risk, we're talking about how brand trust or stakeholder confidence
- 18:58can be impacted by AI performance.
- 19:02And we found a lot of things that came under the umbrella of reputation.
- 19:05Perhaps I'll just touch on a few that were the most disclosed.
- 19:07Interestingly, Steve, often when people think of reputation or harm, they might
- 19:11think of privacy and data protection issues, or generative AI creating
- 19:15hallucinations or perpetuating bias.
- 19:18And those are in there, and we find companies are disclosing
- 19:21more on those kinds of issues.
- 19:22But actually the most commonly disclosed reputational AI risk
- 19:27related to the potential damage from overpromising or failed AI deployments
- 19:32that do not meet expectations.
- 19:35So in other words, the risk that AI might not deliver the
- 19:38promise that we hope it does.
- 19:39So I think it's just really interesting how companies are
- 19:42looking at reputation and AI from a very much a multidimensional lens.
- 19:46They're thinking about reputation in terms of consumers and stakeholders, but they're
- 19:49also thinking about the reputational harm that may ensue if AI doesn't work out.
- 19:55Steve Odland: Well there's so many pieces that AI impacts.
- 19:59If you're talking about generative AI, you know this,
- 20:02you've mentioned hallucinations.
- 20:04But even beyond that, you have AI producing content or
- 20:08design or creating things.
- 20:11You don't know if they're violating somebody else's IP.
- 20:14You don't know whether this stuff is right or wrong a lot of times.
- 20:18All of these things go to people trusting the products and services of a company.
- 20:24And so this is part and parcel of the reputational risk.
- 20:28Andrew Jones: It's a really good point.
- 20:29Yeah.
- 20:29And it's extremely difficult to keep up, right?
- 20:32It's difficult to keep up from a corporate perspective, from
- 20:34a risk management perspective, from a governance perspective.
- 20:36And I think it just illustrates how, as AI uses mainstream, and it's
- 20:41incorporated into all sort of corners of the business and the enterprise,
- 20:45AI risk is also cutting into all corners of the enterprise, too.
- 20:48And it's cutting across legal, financial, operational, and ethical dimensions.
- 20:54And it just raises huge governance challenges.
- 20:57And I think that's perhaps the key to all of this.
- 20:59That if firms are going to harness the potential of AI while avoiding
- 21:05or mitigating these kind of potential risks, some of which have potentially
- 21:09huge material impacts, it will require very effective and very
- 21:12agile governance and oversight.
- 21:15Steve Odland: Another place that reputational risks
- 21:17creep in is in recruiting.
- 21:19And a lot of human resource departments have implemented AI tools in order to sort
- 21:24through the enormous volume of resumes and applications that people get for jobs.
- 21:31And so in other words, think about it as you just program the screening
- 21:35of this thing, and they're finding sometimes that these tools are screening
- 21:41out certain classes or certain types of people, maybe on demographic data and
- 21:48so forth, and can be discriminatory.
- 21:50So that's another place where reputational risk creeps in and the
- 21:54need to have, human beings really govern the implementation of AI.
- 22:00Andrew Jones: Really important point, Steve.
- 22:02I think people are waking up to the fact that AI can often, I guess
- 22:06it can perpetuate certain biases or could, as you said, perhaps exclude
- 22:11certain groups, certain categories, particularly demographic categories,
- 22:14perhaps because the training data itself it's trained on has gaps in
- 22:17it, or even the way it's processed.
- 22:19And that can then take on and perpetuate already existing
- 22:22disproportionate impacts and biases.
- 22:24It's a really important point.
- 22:25And these kind of issues, if they come to light or they lead
- 22:30to discriminatory outcomes, can be reputationally catastrophic.
- 22:33And it's worth pointing out that the lit there is litigation
- 22:36emerging on, for example, the use of AI in workforce hiring practices.
- 22:40Companies need to be very careful here, for sure.
- 22:42Steve Odland: And it cuts both ways, because you also have the government,
- 22:46clamping down on DEI-related and quota-related training and recruiting.
- 22:52And so therefore, either way, if it's a positive bias, negative
- 22:56bias it can be risky, as well.
- 22:58We're talking about disclosures in your report mostly.
- 23:01The concept of disclosures come out of a company's ERM, enterprise risk
- 23:06management planning, which usually sits with the audit committee.
- 23:10Sometimes there's a risk committee in financial services and other industries,
- 23:15but it's usually the audit committee.
- 23:16But that whole ERM process needs to be rethought in order to include all of these
- 23:23kinds of AI risks, because the risk factor reporting comes out of that process.
- 23:28Andrew Jones: Agreed.
- 23:28And we've done some interesting sort of early work on in the Governance
- 23:31& Sustainability Center on where companies and specific boards are
- 23:35starting to sit AI responsibility.
- 23:38And to your point, Steve, yeah, we're often finding the audit committee
- 23:40is where it is for the reasons you said, I think—the oversight of risk
- 23:43or the oversight of risk management.
- 23:44But clearly there is, I think to your point, there is a huge need for evolution
- 23:48here to refresh and even rethink some of the risk exposures of companies.
- 23:54And also think about how you govern all of that, right?
- 23:57And how you govern across functions, as well.
- 23:59And I think the more effective approaches here are those that really
- 24:02do bring in from across the company.
- 24:03I'm thinking, obviously, risk and compliance, technology, but
- 24:07also legal, communications, ESG.
- 24:10There needs to be a lot of voices here to ensure that AI risks one, aren't ongoing
- 24:15undetected, and two, are being managed and mitigated in an effective and agile way.
- 24:20Steve Odland: So just wrapping up here, as you look ahead, what are
- 24:23some areas of AI risks that you think will become more prominent and
- 24:30companies need to be thinking about just in case they have blind spots?
- 24:33Andrew Jones: So it's a really great question, and I think you already
- 24:35mentioned one of these, Steve, which is around the workforce and labor
- 24:38relations, and what the scaling and integration of air might mean.
- 24:41We all know the automation in AI can impact unemployment patterns,
- 24:46can widen skill gaps, can lead to changes within workforce composition.
- 24:51and that does raise risks, right?
- 24:53And we didn't really find any companies really disclosing on these issues yet.
- 24:57But I think the labor and retraining costs and reputational elements could
- 25:01become material in the years ahead.
- 25:03And in addition to that, we'd also perhaps point out two other things,
- 25:06one of which is the environmental and sustainability dimensions here.
- 25:10No risk disclosures to talk about this, but we know training and running
- 25:14large AI models can consume a lot of energy, can consume a lot of water.
- 25:19AI's resource intensity might start attracting more investor
- 25:23attention in the years to come.
- 25:24And we might see, particularly certain companies like the hyperscalers,
- 25:27the tech companies, the data center providers, may be putting
- 25:30a bit more emphasis on that area.
- 25:32And one other thing I'd point to that I think is across the board and
- 25:35something that a lot of companies still need to grapple with is
- 25:38the next generation of AI, right?
- 25:40And particularly agentic AI, that is a lot more autonomous, has
- 25:45a lot less human involvement.
- 25:47And I think the unpredictability and lack of clear human control
- 25:51could trigger a whole range of new liability and governance challenges.
- 25:55So there's a lot that companies should be keeping on their radar here.
- 25:58Steve Odland: Yeah.
- 25:58And if you look at the stock market today, we are in a bit of an AI bubble.
- 26:03It reminds me of 1999 and the dot-com era bubble where the market got frothy.
- 26:10And a key risk here is that these AI companies, or companies that have
- 26:15talked about implementation of AI or their business model revolves
- 26:19around it, there's risks that they're overpromising to their investors.
- 26:23And you know, no line continues at a steep up, up, up.
- 26:28And so there are all sorts of market risks and valuation risks about.
- 26:33And any loan and debt covenants that revolve around that.
- 26:37So lots of financial things that companies need to think about, as well.
- 26:41Andrew Jones: Really great point, Steve.
- 26:42I completely agree, and I'd add as well that those market risks
- 26:45are also obviously intertwined with geopolitical risks, as well.
- 26:48At the same time, we're seeing AI at the global level, it has almost become
- 26:52a sort of proxy for economic power.
- 26:54And, the US, China, EU are all pursuing quite a different approach to AI, but
- 27:00obviously the end goal is clear to position as a leader in the space.
- 27:03So that complicates all of the market and industry-level risks, as well.
- 27:07So it's a really fascinating area, and companies need to stay ahead and
- 27:11need to look ahead and need to be closely monitoring the environment.
- 27:14Steve Odland: OK, we'll leave it there.
- 27:16Dr. Andrew Jones, thanks for being with us today.
- 27:19Andrew Jones: Great to be with you, Steve.
- 27:20Always a pleasure.
- 27:21Steve Odland: And thanks to all of you for listening to C-Suite Perspectives.
- 27:25I'm Steve Odland, and this series has been brought to you by The Conference Board.