Lucy Montague: Proposes AI Ethics Dashboard for Board Oversight

• Lucy Montague of AfriSam advocates for the Information Services Ethical Behaviour Assurance Index (IS-EBAI), an AI ethics dashboard, to strengthen board oversight of AI decisions.
• The IS-EBAI framework consolidates ten ethical governance dimensions into a single board reporting structure for measurable assurance over ethical AI use.
• This model is informed by established governance principles, including the Three Lines Model and King V, relevant to the South African context.
• Montague will present the IS-EBAI at ITWeb GRC 2026, emphasizing the need for ethical AI application amidst evolving enterprise governance.
• The framework helps translate complex AI risks into meaningful board assurance indicators, supported by evidence-based reporting.

Montague underscores a fundamental principle: AI is merely a tool, and the focus must extend beyond the technology itself to assist organizations in applying it both effectively and ethically.

Lucy Montague, who serves as the information services governance, solutions, and services delivery manager at AfriSam, a prominent supplier of construction materials and technical solutions, is advocating for a significant enhancement in how corporate boards oversee decisions driven by artificial intelligence. She contends that current oversight mechanisms are inadequate given the rapid integration of AI into business operations. To address this, Montague proposes the implementation of an innovative framework: the Information Services Ethical Behaviour Assurance Index (IS-EBAI) governance model.

This model is designed to serve as a crucial tool for strengthening board accountability and ensuring ethical deployment of AI technologies. Montague is scheduled to elaborate on the value and practical application of this model at the ITWeb GRC 2026 conference, taking place on November 12 at The Forum in Bryanston. Her presentation will delve into the necessity of such a framework as organizations increasingly adopt AI, intelligent automation, and autonomous business processes, highlighting the imperative for robust governance in this evolving landscape.

The IS-EBAI framework, championed by Lucy Montague, offers a structured approach to provide measurable assurance regarding the ethical utilization of technology, data, and AI within an organization. It systematically consolidates ten distinct ethical governance dimensions into a unified reporting structure specifically tailored for board-level review. These critical dimensions encompass aspects such as privacy, integrity, accountability, transparency, fairness, responsible AI, and diligent third-party stewardship, ensuring a comprehensive ethical lens is applied to AI operations.

Montague’s presentation will demonstrate how the inherent complexities of technology and AI-related risks can be effectively translated into actionable, meaningful assurance indicators for the board. This process is underpinned by evidence-based reporting, clearly defined governance thresholds, and robust escalation mechanisms, enabling boards to maintain informed oversight. Delegates attending her session will gain practical insights into fortifying board oversight of AI-enabled decisions, striking a balance between fostering innovation and maintaining trust, and proactively preparing for the future of technology governance within South Africa.

The development of the IS-EBAI model is deeply informed by, though not directly copied from, several well-established domains, including corporate governance and assurance, information security and data governance, ethics and responsible technology, and comprehensive risk aggregation. Lucy Montague specifically emphasizes the significant influence of the Three Lines Model, formerly known as the Three Lines of Defence. This globally recognized framework for governance, risk management, and assurance is promoted by the Institute of Internal Auditors (IIA) and provides a foundational structure for the IS-EBAI.

Montague also draws a clear connection between the IS-EBAI and the revered King V governance principles, which are highly relevant in the South African context. She highlights that within South African governance, the Three Lines Model plays a vital role in supporting board governance and oversight, ensuring accountability for risk management, and facilitating combined assurance reporting. Montague underscores a fundamental principle: AI is merely a tool, and the focus must extend beyond the technology itself to assist organizations in applying it both effectively and ethically. This perspective is crucial for lawyers and compliance officers advising boards on implementing comprehensive AI governance frameworks.

The contemporary business environment is witnessing a fundamental redefinition of enterprise governance, driven by the rapid convergence of artificial intelligence, evolving regulatory landscapes, escalating cyber risks, concerns over digital sovereignty, and sustainability imperatives. Traditional approaches to governance, risk, and compliance (GRC) are proving increasingly insufficient in an era where AI systems are assuming a more central role in critical decision-making processes. This shift necessitates a proactive and adaptive governance strategy.

The upcoming ITWeb GRC 2026 event will critically examine the governance implications arising from AI, agentic systems, cyber resilience, RegTech, digital trust, ESG considerations, critical infrastructure, quantum readiness, and other emerging technologies. Ntando Sibanda, the senior conference producer at ITWeb Events, expressed encouragement regarding the growing emphasis on governance, ethics, and practical application in AI adoption across various sectors. He stressed that organizations must skillfully balance their AI-driven aspirations with robust governance frameworks, as both elements are indispensable for achieving scalable innovation. The event is considered highly strategic, reflecting the increasing interest in integrating AI into business operations and the undeniable need for enhanced visibility and control over these powerful technologies.

Lawyers and compliance officers in South Africa should advise boards on implementing comprehensive AI governance frameworks, such as the IS-EBAI model, to ensure ethical AI deployment and mitigate compliance risks. This involves integrating new AI ethics dashboards with existing corporate governance principles like King IV/V and the Three Lines Model to provide measurable assurance and translate complex AI risks into actionable board oversight.

Source: Original reporting via ITWeb GRC 2026 preview