Faster, but safer: How Nesta is rethinking AI governance

How can organisations move fast enough to embrace AI without losing control of security, data and risk? In this episode of The esynergy Podcast, Ryan Preece speaks with Paul Slade, Group Director of Technology at Nesta, about why traditional technology governance is struggling to keep pace with SaaS, AI and the speed of modern organisations. Paul explains how centralised approval processes can become bottlenecks, inadvertently driving shadow IT and leaving technology teams reacting to decisions rather than enabling them. He shares how Nesta is exploring a more devolved approach, giving people clearer, real-time information about risk while creating the accountability, decision logging and audit trails needed to maintain control. The conversation also explores the other side of AI risk: what happens if organisations move too slowly? For charities and other resource-constrained organisations in particular, failing to adopt AI could mean missing significant opportunities to improve productivity and impact. Key topics covered: Why traditional IT governance struggles to keep pace with AI and SaaS Moving from centralised approvals to devolved decision-making Making security and risk a shared responsibility across the organisation Using AI to identify, and potentially predict technology risks Why not adopting AI can be a risk in itself Getting data, security and controls right before scaling Using existing AI capabilities within platforms such as Microsoft and Google Creating safe environments for experimentation through sandboxing Paul shares a practical vision for governance that isn't about removing controls, but giving people the information and guardrails they need to make better decisions, helping organisations innovate faster, but safer. This episode is essential listening for CTOs, CIOs, CISOs, technology leaders, security leaders and digital transformation teams navigating AI adoption while balancing innovation, governance and risk.