{"id":20385,"date":"2026-10-30T09:52:30","date_gmt":"2026-10-30T08:52:30","guid":{"rendered":"https:\/\/www.online.ch\/webinar-on-ai-governance-how-companies-can-scale-ai-safely-and-responsibly\/"},"modified":"2026-10-30T09:55:05","modified_gmt":"2026-10-30T08:55:05","slug":"webinar-on-ai-governance-how-companies-can-scale-ai-safely-and-responsibly","status":"publish","type":"post","link":"https:\/\/www.online.ch\/en\/webinar-on-ai-governance-how-companies-can-scale-ai-safely-and-responsibly\/","title":{"rendered":"Webinar on AI Governance: How Companies Can Scale AI Safely and Responsibly"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\">AI Requires Clear Accountability and a Reliable Framework<\/h2>\n\n<p class=\"wp-block-paragraph\">AI supports employees in their day-to-day work, taps into knowledge, and is increasingly taking on tasks within business processes. As a result, the demands for its responsible use are also growing. Who decides which applications are permitted? What data are agents allowed to access? And who bears responsibility for the results and costs? This was precisely the focus of our webinar \u201cAI Governance: Law, Organization &amp; Technology for Secure AI\u201d on October 29, 2026. Ralf Angermann, Fabienne Bouff\u00e9, and Jan Niederhauser demonstrated how companies combine organizational guidelines with technical controls.<\/p>\n\n<figure class=\"wp-block-embed is-type-video is-provider-youtube wp-block-embed-youtube wp-embed-aspect-16-9 wp-has-aspect-ratio\"><div class=\"wp-block-embed__wrapper\">\n<iframe hcb-fetch-image-from=\"https:\/\/youtu.be\/iF7H1hhqvf4\" title=\"Webinar &quot;AI Governance \u2013 Recht, Organisation &amp; Technologie f\u00fcr sichere KI&quot; \/ 10.2026\" width=\"800\" height=\"450\" src=\"https:\/\/www.youtube.com\/embed\/iF7H1hhqvf4?feature=oembed\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share\" referrerpolicy=\"strict-origin-when-cross-origin\" allowfullscreen><\/iframe>\n<\/div><figcaption class=\"wp-element-caption\">Watch the full recording of the webinar!<\/figcaption><\/figure>\n\n<h2 class=\"wp-block-heading\">Shadow AI Highlights the Need for Action Within the Company<\/h2>\n\n<p class=\"wp-block-paragraph\">Many employees already use AI in their daily work. Often, they also use personal tools and accounts for this purpose. The live survey conducted during the webinar showed that this practice is also widespread among the participants. At the same time, governance guidelines were sometimes nonexistent or unknown. For companies, this creates a gap between the defined rules and actual day-to-day work. The first step, therefore, is to create transparency: Which applications are being used, what data do they process, and what approved alternatives are available to employees?<\/p>\n\n<div data-wp-interactive=\"core\/file\" class=\"wp-block-file\"><object data-wp-bind--hidden=\"!state.hasPdfPreview\" hidden class=\"wp-block-file__embed\" data=\"https:\/\/www.online.ch\/wp-content\/uploads\/Praesentation_Webinar_AI_Governance.pdf\" type=\"application\/pdf\" style=\"width:100%;height:600px\" aria-label=\"Embed of Pr\u00e4sentation_Webinar_AI_Governance.\"><\/object><a id=\"wp-block-file--media-a1460b8c-4cc6-4cc6-aaaa-d736e0155722\" href=\"https:\/\/www.online.ch\/wp-content\/uploads\/Praesentation_Webinar_AI_Governance.pdf\">Presentation_Webinar_AI_Governance<\/a><a href=\"https:\/\/www.online.ch\/wp-content\/uploads\/Praesentation_Webinar_AI_Governance.pdf\" class=\"wp-block-file__button wp-element-button\" download=\"\" aria-describedby=\"wp-block-file--media-a1460b8c-4cc6-4cc6-aaaa-d736e0155722\">Download<\/a><\/div>\n\n<h2 class=\"wp-block-heading\">AI governance is a management responsibility<\/h2>\n\n<p class=\"wp-block-paragraph\">Senior management determines the company\u2019s AI objectives, the risks it is willing to take, and what uses are permitted. Business units are responsible for their use cases and the benefits they deliver. IT and security implement technical controls and monitor operations. Employees, in turn, must critically evaluate results and comply with internal guidelines. Fabienne Bouff\u00e9 made it clear that these responsibilities must be clearly defined across all levels. This includes transparent decision-making, defined responsibilities, and a shared understanding of when human oversight is required.<\/p>\n<div class=\"onbox bd-8dwgmcafrddrnrh06cfj9rt76o6oet wp-block-bd--- wp-block-bd-block-1375 bd-resizeobserve\"><p class=\"bd-0yf56vja20h0ixeh5qo1bjqsdxrcsj\">&#8220;It is important to consider governance from the very beginning and not to establish it as an afterthought.&#8221;<\/p><p class=\"bd-tm1tjrn4bjl3j4e9ftard2js1tnvo8\">Ralf Angermann<\/p><p class=\"bd-3rekxr7mpfb5v8uosfop4fte9192pf\">Head of AI Solutions<\/p><\/div>\n<h2 class=\"wp-block-heading\">People, processes, policies, and technology work together<\/h2>\n\n<p class=\"wp-block-paragraph\">The AI Governance Operating Model presented in the webinar encompasses four perspectives: People, Process, Policy, and Technology. People need clear roles and the appropriate skills. Processes govern how new use cases are submitted, evaluated, and approved. Internal policies define permitted use and the handling of data. Technology implements these requirements through identities, permissions, data protection, and monitoring. The model is effective when all four perspectives are integrated and the rules are understandable and actionable in day-to-day work.<\/p>\n\n<h2 class=\"wp-block-heading\">The specific use case determines the review<\/h2>\n\n<p class=\"wp-block-paragraph\">A governance review begins with the purpose of the application. What data is being processed? Are individuals affected by the results? What consequences could an incorrect answer or an unintended action have? In the webinar, this was illustrated using the example of a customer service agent who reviews inquiries and drafts responses. Among other things, the responsibility for the application, the permitted data sources, and the review process before sending must be clarified. A documented purpose, a designated owner, data authorization, and a risk assessment form the basis for controlled use.<\/p>\n\n<h2 class=\"wp-block-heading\">Legal requirements must align with the use case<\/h2>\n\n<p class=\"wp-block-paragraph\">Which legal requirements are relevant depends on the specific use case and its area of application. The webinar provided an overview of Swiss legal foundations, potential requirements related to the EU, and international frameworks. For companies, this means incorporating legal issues into the assessment early on and clarifying their applicability in each individual case. Frameworks such as the OECD AI Principles, ISO\/IEC 42001, and the NIST AI Risk Management Framework can provide guidance for systematically establishing responsibilities, risk assessments, and governance processes.<\/p>\n\n<h2 class=\"wp-block-heading\">AI expertise is developed through continuous learning<\/h2>\n\n<p class=\"wp-block-paragraph\">For employees to use AI responsibly, they need to understand the technology\u2019s capabilities and limitations. This includes handling sensitive data securely, being familiar with approved tools, and being able to critically evaluate results. Power users and AI champions can deepen and share this knowledge within their teams. Managers and business owners also need the understanding to assess risks and take responsibility for approvals. Regular training and the sharing of concrete experiences help keep pace with rapid developments.<\/p>\n\n<h2 class=\"wp-block-heading\">Governance supports the entire lifecycle<\/h2>\n\n<p class=\"wp-block-paragraph\">AI governance must evolve alongside applications and their operating conditions. The process outlined here consists of five steps: Discover, Assess, Govern, Protect, and Monitor. Companies first identify applications and ideas, assess risks, define rules, and implement protective measures. During operation, they monitor usage, costs, risks, and changes. The insights gained are then fed back into the assessment and management processes. This ensures that governance remains effective even when new data sources are added, agents take on additional tasks, or requirements change.<\/p>\n\n<h2 class=\"wp-block-heading\">Secure alternatives help combat shadow AI<\/h2>\n\n<p class=\"wp-block-paragraph\">Anyone who wants to curb the use of private AI tools must also understand the needs of employees. They are often looking for a quick and easy way to complete their tasks. Companies should therefore provide approved applications, explain their benefits, and support teams during the implementation process. In addition, technical controls can limit the use of unauthorized applications or data flows. In the webinar, Jan Niederhauser demonstrated how important this synergy is: Clear guidelines, suitable alternatives, and transparent approval processes make it easier for employees to work within the intended framework.<\/p>\n<div class=\"onbox bd-8dwgmcafrddrnrh06cfj9rt76o6oet wp-block-bd--- wp-block-bd-block-1375 bd-resizeobserve\"><p class=\"bd-0yf56vja20h0ixeh5qo1bjqsdxrcsj\">&#8220;We don&#8217;t believe that simply banning things can be the answer.&#8221;<\/p><p class=\"bd-tm1tjrn4bjl3j4e9ftard2js1tnvo8\">Jan Niederhauser<\/p><p class=\"bd-3rekxr7mpfb5v8uosfop4fte9192pf\">Copilot Lead &amp; Consultant<\/p><\/div>\n<h2 class=\"wp-block-heading\">Data Access and Permissions Take Center Stage<\/h2>\n\n<p class=\"wp-block-paragraph\">AI can find and consolidate information quickly. This makes overly broad permissions particularly relevant. Data that was previously difficult to find can suddenly appear in search results. Companies should therefore review who is allowed to access which content and how sensitive information is classified and protected. Within the Microsoft ecosystem, Microsoft 365 permissions, Entra, Purview, and Defender, among other tools, work together to support this. They help control access, protect data, and ensure transparency in usage.<\/p>\n\n<h2 class=\"wp-block-heading\">AI agents need an owner and clear rules<\/h2>\n\n<p class=\"wp-block-paragraph\">As the number of agents grows, so does the need for a centralized overview. Companies need to know which agents are in use, who is responsible for them, and what data or actions have been approved for them. Reliable support is especially important for applications that support entire teams or business-critical processes. In the webinar, Jan Niederhauser provided insights into administration in the Microsoft environment and explained the role of Agent 365. The discussion focused on transparency regarding inventory, ownership, usage, and risks, as well as rules for authorization and operation.<\/p>\n\n<h2 class=\"wp-block-heading\">Usage-based costs require clear budgets<\/h2>\n\n<p class=\"wp-block-paragraph\">In addition to security and data protection, cost management is also part of AI governance. While traditional licenses are easy to plan for, agents incur additional costs based on actual usage. Depending on the task, multiple processing steps, data queries, and actions may be involved. Companies should therefore determine who is responsible for budgets and at what level they will monitor usage. This includes setting appropriate limits and alerts for applications, teams, or individual users. This allows them to assess an agent\u2019s value in relation to its running costs.<\/p>\n\n<h2 class=\"wp-block-heading\">Three Questions for the Next Executive Meeting<\/h2>\n\n<p class=\"wp-block-paragraph\">At the conclusion of the technical section, three specific questions remained: Who is authorized to build and share agents within our organization? Who is responsible for AI costs, and what are the limits? Do we know which agents and AI applications are already in use today? These questions provide a tangible starting point for assessing your organization\u2019s current status. They highlight where decisions are missing, where responsibilities need to be clarified, or where additional transparency is required. From this, prioritized actions for the organization and IT can be derived.<\/p>\n\n<h2 class=\"wp-block-heading\">AI governance lays the foundation for secure scaling<\/h2>\n\n<p class=\"wp-block-paragraph\">The webinar demonstrated how closely responsibility, risk assessment, and technical implementation are interlinked. Clear roles, understandable guidelines, and ongoing training provide direction. Technical controls support compliance and provide evidence for operations. With the Online (AI) Governance Service, we help companies establish standards, manage deviations, and regularly review their Microsoft 365 environment. Want to know where your company stands? Together, we\u2019ll map out the next steps for the secure and responsible use of AI.<\/p>\n<div class=\"onbox bd-u4ylduznt4yb3aurcnqk87if6p2j8d wp-block-bd--- wp-block-bd-block-646 bd-resizeobserve\"><h3 class=\"bd-395l4piisgquonlapl8rkev2cc4kzj\">Do you have specific questions or use cases you&#8217;d like to discuss in more detail?<\/h3><p class=\"bd-rx3gwhai8niixl211yz4puo9zduj1n\">Our experts are happy to provide advice and assistance.<\/p><div class=\"bd-wo6zlr1lkq5x19k0g5ocq7zlqzac0l\"><img decoding=\"async\" src=\"https:\/\/www.online.ch\/wp-content\/uploads\/Portrait_Guentensperger_Thomas_freigestellt-scaled.png\" class=\"bd-mu5adelws9403axzfxp06f7nb2qkhp\"><div class=\"bd-uhgfsii4ysarp8gnxvqh1r1msz6b73\">Thomas G&#xFC;ntensperger<span class=\"bd-tiuv7dcri6p3wiyc8fczoqdfn64rxl\">Client Partner<\/span><div class=\"bd-authorlink bd-hdmiim4l6kri4rr8lzxs9fpbkv2eny\">+41 71 913 31 71<\/div><div class=\"bd-authorlink bd-g9exv0n31kecgu3c2fju0l3yut252j\">thomas.guentensperger@online.ch<\/div><\/div><\/div><\/div>","protected":false},"excerpt":{"rendered":"<p>AI Requires Clear Accountability and a Reliable Framework AI supports employees in their day-to-day work, taps into knowledge, and is increasingly taking on tasks within business processes. As a result, the demands for its responsible use are also growing. Who decides which applications are permitted? What data are agents allowed to access? And who bears [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":20382,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[77,80],"tags":[],"class_list":["post-20385","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-about-us","category-ai-en"],"_links":{"self":[{"href":"https:\/\/www.online.ch\/en\/wp-json\/wp\/v2\/posts\/20385","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.online.ch\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.online.ch\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.online.ch\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.online.ch\/en\/wp-json\/wp\/v2\/comments?post=20385"}],"version-history":[{"count":2,"href":"https:\/\/www.online.ch\/en\/wp-json\/wp\/v2\/posts\/20385\/revisions"}],"predecessor-version":[{"id":20387,"href":"https:\/\/www.online.ch\/en\/wp-json\/wp\/v2\/posts\/20385\/revisions\/20387"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.online.ch\/en\/wp-json\/wp\/v2\/media\/20382"}],"wp:attachment":[{"href":"https:\/\/www.online.ch\/en\/wp-json\/wp\/v2\/media?parent=20385"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.online.ch\/en\/wp-json\/wp\/v2\/categories?post=20385"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.online.ch\/en\/wp-json\/wp\/v2\/tags?post=20385"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}