The Conversation With Management
Questions, Not a Checklist
The conversation with management about AI fails in two familiar ways. Run as a checklist, it collects nouns — a list of systems, a vendor name, a yes to every governance question — and the answers optimise themselves to end the meeting. Run as enthusiasm-matching, it becomes a shared admiration of the transformation programme. The productive version is the ordinary sceptical interview, aimed at a new object: open questions, then follow the answer. Ask what the model decides, and then ask what happened the last time it was wrong. Ask who owns it, and then ask what that person changed this year. Ask what management would do if the model were unavailable tomorrow morning. The follow-up question is where the information lives, because the first answer is what the organisation tells itself, and the second answer is what it actually knows.
- A checklist collects nouns, and the answers optimise themselves to end the meeting
- Open questions, then follow the answer — the second answer is what the entity actually knows
- Pair every capability question with a failure question: what happened last time it was wrong
- The unavailability question — what would you do tomorrow without it — exposes the fallback honestly
What a Good Answer Sounds Like
Good answers share a texture, and it is not technical fluency. A named owner who turns out, when asked, to actually make decisions about the model. Known limits stated without prompting — where it performs badly, which cases are routed to a person, what it was never designed to handle. A fallback that has been used at least once, not merely described. A change log that matches the year the team has just walked through. Bad answers share a texture too: enthusiasm without ownership, benefits without limits, governance vocabulary recited a little too smoothly, and the tell that recurs throughout this course — confidence about the model's outputs from people who cannot say how they would know if those outputs went wrong. Neither texture is a conclusion, and neither replaces testing. Both are evidence about the environment, and both belong in the risk assessment.
- Named owner, unprompted limits, a fallback that has actually been used, a change log that matches the year
- Enthusiasm without ownership and benefits without limits are the texture of a bad answer
- Governance vocabulary recited too smoothly is a prompt for follow-up, not reassurance
- The recurring tell: confidence in outputs from people who could not detect those outputs going wrong
From Conversation to File
A conversation that changes the audit and leaves no trace has, for the file's purposes, not happened. What goes in: who was asked, what was asked, and the substance of the answers — including the follow-ups, because 'management stated the model is monitored' and 'management could not describe the monitoring when asked' are different workpapers describing the same meeting. The red flags observed, connected to the risks they inform rather than left as atmosphere. The corroboration planned, since representations about governance are still representations and want the same tie-back to evidence as any other. And the effect on the plan: what the team now treats differently because of what it heard. The standard the record should meet is this module's recurring one — a reviewer who was not in the room can see what was learned, what it meant, and what the audit did about it.
- Record the follow-ups: the failed answer to a second question is often the finding
- Red flags enter the file tied to risks, not as atmosphere the reviewer must reconstruct
- Representations about governance are still representations — plan the corroboration
- The test: a reviewer who was not in the room sees what was learned and what the audit did about it
Prefer slides, quizzes, and saved progress? Read this lesson in the library — free, no sign-up.