The five questions your board will ask about AI

A professional reviewing notes at a boardroom table with another person seated across from them
TL;DR

Boards ask five predictable questions at every AI update: whether the work fits the business model, how ROI is measured, what risks are being managed, what internal capability is being built, and what lasting advantage it creates. A delegate who has prepared crisp, honest answers to all five walks into the boardroom with authority rather than improvisation.

Key takeaways

- Boards ask five predictable questions about AI at every update: alignment with the business model, ROI measurement, risk management, internal capability building, and competitive advantage. - The business-model alignment question trips up delegates who've been technology-led rather than commercially led in their AI programme. - A dual-ROI frame, covering trending indicators now and realised returns over 12 to 24 months, gives honest and defensible answers when financial results aren't yet visible. - Reputational exposure, data security, and regulatory questions come up consistently at board level; naming them with active mitigations builds credibility. - The capability question asks whether AI is building a durable internal asset or a vendor dependency; boards with an eye on exit are especially focused on this distinction.

You’ve got 20 minutes at the next board meeting to update on AI. You know what you’ve been working on. What you don’t know is which question is going to come in sideways and leave you searching for an answer. Boards ask a predictable set of questions about AI, and the delegate who has prepared honest answers for all five walks in looking like they’re leading the programme rather than reacting to it.

How does this AI work fit our business model?

This is the board checking that the AI work connects to how the business actually makes money, not floating alongside it as an interesting experiment. A strong answer names the specific part of the operation being improved, explains how that links to a revenue or cost line, and makes clear the programme is prioritised around commercial outcomes rather than capability for its own sake.

The question catches delegates who’ve been technology-led. If you’ve spent months evaluating tools or running pilots without a clear commercial logic behind them, this is the question that exposes the gap. Boards in investor-backed owner-managed businesses are especially alert to it because the founder is often driving AI adoption partly for valuation reasons, and the board wants to see that commercial logic visible on paper.

The framing that works is a direct one. You’re applying AI to a specific function because it affects a particular cost or revenue metric by an estimated scale, and the first phase targets a specific workflow. You don’t need a finished business case at every update, but the logic needs to be consistent from meeting to meeting, and it needs to be in the language of the business rather than the language of the technology.

How will you measure the return?

Boards want evidence that ROI is being tracked, not promised. For many AI programmes in the first year, realised financial returns aren’t yet visible, but leading indicators should be. A dual-ROI frame handles this well: trending ROI covers the early signals you can report now, and realised ROI is the financial outcome you’re building towards over a 12 to 24 month window.

Trending indicators might include hours recovered from a specific process, error rates on a document workflow, or adoption levels across a team using a new tool. These are the numbers worth collecting from month one. They tell the board that the programme is being monitored carefully, that you know what success looks like, and that you’ll be able to demonstrate the path from early signals to financial outcomes.

Meaningful ROI from AI programmes typically takes 12 to 24 months to emerge, with some programmes reporting longer timelines. Setting that expectation clearly at an early update, rather than hoping the board adjusts on its own, is one of the more useful things a delegate can do in those first few conversations.

What risks are you managing?

Boards don’t expect AI to carry no risk. They expect whoever is running it to have a clear view of what the risks are and what’s actively being done about them. Reputational exposure, data security, and regulatory questions come up consistently at board level. A delegate who can name specific active risks and their mitigations looks considerably more credible than one who says ‘we’re keeping an eye on it’.

Reputational risk comes from AI-generated outputs that are wrong or harmful in a context that reaches customers or staff. Data security covers what business, customer, or employee information the tools can access and retain. Regulatory exposure varies by sector but is increasingly present across professional services, finance, and healthcare as AI-specific guidance develops.

Preparing three to four lines on each risk category is enough for a board conversation. Cover who owns it, what controls are in place, and whether the exposure is proportionate to the scale of what you’re running. A simple governance summary, one page at most, carries considerably more weight in a board conversation than a verbal reassurance that things are under control.

What capability are you building internally?

This question is checking whether AI is creating a durable asset inside the business or a vendor dependency that disappears when the contract ends. Boards with an eye on exit are especially interested in this. The answer they want is that the team is gaining skills, processes are being documented, and the organisation is becoming more capable as a result of the work, rather than simply using a new tool.

Korn Ferry’s research on AI leadership readiness identifies a recurring pattern. Businesses assign AI leadership to strong operators who get the tools working but don’t build the surrounding capability that makes the gains stick. The result is adoption without depth, where the programme looks healthy in the short term but hasn’t changed how people actually work.

A strong answer here names what skills the team is actively building, explains how the AI processes are being documented so they’re repeatable without the original implementer, and describes what governance process ensures the tools stay fit for purpose over time. If you can speak to all three, the board hears an organisation that is becoming more capable, rather than simply better-tooled.

What lasting advantage does this create?

This is the hardest of the five to answer well, because genuine competitive advantage from AI takes time to compound and boards often want a more immediate story. A clear answer works at two levels. The near-term gain comes from removing bottlenecks and recovering wasted capacity. The longer-term edge comes from having AI embedded in the operation before the competition catches up. Neither claim is a stretch, and neither requires overpromising.

The near-term gain is the easier one to quantify. If a process that took a day now takes two hours, that capacity is real and it’s already accruing. Over 12 months, compounded across several workflows, it adds up to something board-presentable.

The longer-term edge is harder to quantify but worth making explicit. Owner-managed businesses that build AI into their operations over the next two to three years are positioning themselves at an advantage relative to those who wait. For a board considering an exit horizon, that is a genuine and material factor in how the business looks at due diligence. Making the case clearly for why being earlier to this matters is straightforward without overpromising.


These five questions come up at virtually every board AI conversation in an owner-managed business, regardless of industry or scale. They’re predictable enough to prepare for properly. A delegate who has a clear, honest answer to each one, including the ones where the honest answer is ‘not yet, but here’s what we’re tracking’, builds the kind of board confidence that gives them room to do the work.

Sources

- McKinsey & Company (2025). Superagency in the Workplace. Research on AI adoption patterns and the gap between AI usage and business impact, cited for adoption realities and ROI timelines. https://www.mckinsey.com/capabilities/tech-and-ai/our-insights/superagency-in-the-workplace-empowering-people-to-unlock-ais-full-potential-at-work - Boston Consulting Group (2025). AI Adoption Puzzle: Why Usage Is Up but Impact Is Not. Primary research on why AI adoption is rising while measurable business impact lags, cited for the ROI measurement challenge. https://www.bcg.com/publications/2025/ai-adoption-puzzle-why-usage-up-impact-not - EY (2025). AI Governance: Board Response to Investor Expectations. Analysis of how boards are responding to investor demands for AI oversight, cited for board governance expectations. https://www.ey.com/en_us/board-matters/ai-governance-board-response-to-investor-expectations - Harvard Law School Forum on Corporate Governance (2025). AI Risk Disclosures in the S&P 500: Reputation, Cybersecurity, and Regulation. Analysis of AI risk categories boards are disclosing, cited for board-level risk priorities. https://corpgov.law.harvard.edu/2025/10/15/ai-risk-disclosures-in-the-sp-500-reputation-cybersecurity-and-regulation/ - PwC (2025). AI Predictions. Annual survey on AI strategy and board expectations, cited for the gap between board expectations and realistic implementation timelines. https://www.pwc.com/us/en/tech-effect/ai-analytics/ai-predictions.html - Korn Ferry (2025). 6 Signs Leaders Lack AI Readiness and How to Fix It. Research on the AI leadership readiness paradox in mid-sized organisations, cited for the capability-building failure pattern. https://www.kornferry.com/insights/featured-topics/gen-ai-in-the-workplace-articles/6-signs-leaders-lack-ai-readiness-and-how-to-fix-it - Scaled Agile (2025). The Board Questions Every CEO Should Be Able to Answer About AI. Framework for the five board-level AI questions, cited as the primary source for the question structure. https://scaledagile.com/blog/the-board-questions-every-ceo-should-be-able-to-answer-about-ai/ - Propeller (2025). Measuring AI ROI: How to Build an AI Strategy That Captures Business Value. Dual-ROI framework covering trending versus realised returns across time horizons. https://propeller.com/blog/measuring-ai-roi-how-to-build-an-ai-strategy-that-captures-business-value - Logixguru (2025). The Board Wants an AI Strategy by Tuesday: A CIO's Survival Guide. Practical framework for board communication and phased planning, cited for the business-model alignment and timeline expectation advice. https://www.logixguru.com/post/the-board-wants-an-ai-strategy-by-tuesday-a-cios-survival-guide - Schellman (2025). AI Implementation Failures in Real-World Deployments. Analysis of real-world AI implementation failures and risk categories, cited for data security and governance risks. https://www.schellman.com/blog/ai-services/ai-implementation-failures-in-real-world-deployments

Frequently asked questions

What is the most important question to prepare for before an AI board presentation?

The business-model alignment question is typically the one that catches delegates off guard, because it requires translating the technical work into commercial language the board recognises. If you can explain which specific problem your AI programme is solving and how that connects to a revenue or cost line, the rest of the conversation tends to follow more smoothly.

How do you handle an ROI question when results aren't showing yet?

Use a dual-ROI frame. Trending ROI covers the leading indicators you can already measure, such as hours recovered, error rates reduced, or adoption levels across the team. Realised ROI is the financial outcome you're building towards, typically over 12 to 24 months. Being explicit about this distinction shows the board that you're measuring carefully, rather than waiting for a number that proves the programme worked.

What risks should I have covered before a board AI update?

Focus on three areas: reputational exposure from AI-generated errors or public-facing decisions going wrong, data security covering what customer or employee data the tools can access, and regulatory or compliance questions depending on your sector. You don't need to have eliminated these risks. You need to show the board that each one is understood, owned, and being actively managed.

This post is general information and education only, not legal, regulatory, financial, or other professional advice. Regulations evolve, fee benchmarks shift, and every situation is different, so please take qualified professional advice before acting on anything you read here. See the Terms of Use for the full position.

Ready to talk it through?

Book a free 30 minute conversation. No pitch, no pressure, just a useful chat about where AI fits in your business.

Book a conversation

Related reading

If any of this sounds familiar, let's talk.

The next step is a conversation. No pitch, no pressure. Just an honest discussion about where you are and whether I can help.

Book a conversation