IoM Guide

AI governance for Isle of Man boards

AI governance is not a document in a drawer. It is a set of decisions the board makes and enforces. Most Isle of Man boards have not made those decisions yet.

By Zakir Hoosen, Director, Fuzzelogic Solutions. Board-level guidance in plain English.

AI governance is not a compliance exercise. It is the set of decisions the board makes about what AI may do, what it may not do, and who answers when it goes wrong. Without those decisions, every AI system in the business is uncontrolled. With them, every AI system has an owner, a boundary, and a line of accountability.

This guide covers what governance means, who is accountable, and how Isle of Man boards should build a framework.

What governance means

Governance is simple in principle. It means someone has decided what the system may do, what it may not do, and who is responsible. That is all. The complexity comes in making those decisions and enforcing them.

Most Isle of Man boards have not made these decisions. The AI systems in the business exist without formal governance. No one has decided what they may or may not do. No one has been appointed to answer when they fail. The systems work, mostly, and everyone hopes for the best.

That is not governance. It is luck.

The JFSC issued AI governance guidance in July 2026. The GFSC is moving the same direction. Isle of Man boards that have not established governance are already behind.

Who is accountable

The board is accountable. Not the IT team. Not the vendor. Not the data scientist. The board. That is what the JFSC guidance says, and it is what governance requires.

Within the board, someone specific must own each AI system. Not a committee. A person. Committees do not lose sleep. People do. The owner of an AI system must have the authority to stop it, the training to understand its output, and the time to monitor it.

For Isle of Man businesses, the owner is often the person who uses the system daily. That is both the strength and the risk. The person who uses the system understands it best. But they also have the least distance from it. They are too close to see the problems. The board needs a separate oversight function, someone who reviews the system from a distance.

Governance is part of the seventy percent. It is process change. It requires the business to change how it documents, how it reports, and how it holds people accountable. That takes executive commitment.

The governance framework

Fuzzelogic uses a governance framework that works for Isle of Man businesses of any size.

1. Step one: Inventory. List every AI system in the business. Yes, every one.
2. Step two: Classification. Rank each system by impact. High, medium, low.
3. Step three: Ownership. Appoint a named owner for each high and medium impact system.
4. Step four: Documentation. For each system, document what it does, what data it uses, and how it is monitored.
5. Step five: Boundaries. For each system, define what it may do and what it may not do.
6. Step six: Review. Set a quarterly review cycle. The landscape changes. The governance must keep up.

The framework is not complex. The execution is where most businesses struggle. The inventory requires someone to look, and most businesses have not looked. Classification requires honest judgement, and most businesses overestimate or underestimate. Ownership requires someone with authority, and most businesses have not assigned it.

Where governance goes wrong

The pattern on the Isle of Man is consistent. The first failure is the invisible system. A tool exists, it works, and no one in governance knows it sits in the business. It is not in the inventory. It is not classified. It has no owner. It works until it does not, and then the board finds out for the first time.

The second failure is the vendor dependency. A firm buys a system, the vendor handles the AI, and the firm cannot explain how it works. The board approves it because the vendor says it is compliant. But the JFSC does not hold the vendor accountable. It holds the board.

The third failure is the documentation gap. The system exists, the board knows about it, but there is no documentation. When the regulator asks, the business scrambles to create documents after the fact. That is not governance.

The two thirds that failed often had no governance. The system worked without oversight, until it did not, and no one was accountable.

The Isle of Man context

Isle of Man boards operate in a specific regulatory context. The JFSC issued AI governance guidance in July 2026. The GFSC is aligned. The EU AI Act applies to firms with EU exposure. The board must understand which regime applies and ensure governance covers all of them.

For Isle of Man firms, the advantage is that the regulatory framework is clear. The guidance is available. The JFSC is accessible. Firms that establish governance now will be ahead of firms that wait for enforcement.

The Island's size is also an advantage. Governance in a small business is simpler than governance in a large one. Fewer systems. Fewer people. Fewer moving parts. The framework can be lean, provided it is enforced.

Rushing without governance is the most expensive mistake an Isle of Man board can make. Governance is the foundation. Without it, everything else is unstable.

The honest assessment

Here is what most consultants will not say. Some AI systems in Isle of Man businesses cannot be governed properly without significant rework. A system that no one understands cannot be governed. A system that cannot explain its decisions cannot meet JFSC requirements. A system without documentation cannot be reviewed.

If the honest answer is that a system needs to be rebuilt, replaced, or stopped, Fuzzelogic puts it in writing. We do not build systems that will not pass governance scrutiny. We tell you which ones can get there and which ones cannot.

Start with the assessment. Two to four weeks, fixed price, and you own the verdict and the roadmap whether or not we build any of it. When you are ready to talk AI, call Fuzzelogic Solutions and ask for Zak. www.FuzzelogicSolutions.com | info@FuzzelogicSolutions.com | +44 (0)1624 618950