Audit committees absorb AI oversight

Audit committees are becoming the default home for a growing share of board-level AI oversight, according to recent guidance from the National Association of Corporate Directors, KPMG, EY, PwC and Deloitte. The shift is not limited to audit. Compensation committees are being pulled into questions about whether pay plans reward speed over controls, while nominating and governance committees are being asked to recruit directors with AI, data and cyber experience. Public-company disclosures show the governance change is already moving into boardrooms, not just conference panels and advisory memos. ISS-Corporate said on March 19, 2025 that 31.6% of S&P 500 companies disclosed some form of AI board oversight in 2024, including committee oversight, director expertise or an AI ethics board. The firm said the share was up more than 84% from 2023 and more than 150% from 2022. Among companies that assigned oversight to a specific body, ISS-Corporate said the full board became the top choice in 2024, after audit and risk committees had been the more common home in earlier years. (nacdonline.org) ### Why is the audit committee getting more of this work? KPMG said in its December 17, 2025 board and audit committee agenda reports that audit committee responsibilities are expanding beyond financial reporting to include emerging risks and opportunities in AI, cybersecurity and sustainability reporting. The firm said audit committees should “define” or “clarify” their oversight role in AI, cybersecurity and data governance. (iss-stoxx.com) EY said in its 2026 first-quarter audit committee update that companies scaling AI across core operations are putting new pressure on governance, controls, cyber exposure and workforce impacts. EY listed governance and control impacts of scaling AI, increased cyber and data risks, and financial reporting effects among the issues audit committees should prioritize. Deloitte said audit committees need to understand AI risks as companies move the technology into core business processes. (kpmg.com) Deloitte pointed specifically to governance, stakeholder trust, internal audit, financial reporting and internal controls, and said AI tools may affect transaction review, error detection and fraud detection. PwC, in separate guidance, said audit committees should oversee six AI risk areas, including cybersecurity. (ey.com) ### What sits inside “AI oversight” once audit owns part of it? Harvard Law School Forum, summarizing a July 2025 memo by lawyers at Debevoise & Plimpton, said audit committees may oversee AI use in financial reporting, internal control over financial reporting, risk management and compliance even when the full board keeps primary responsibility. The memo also said committees can use internal audit to assess risks tied to AI models embedded in third-party software as well as models developed internally. (deloitte.com) Society for Corporate Governance said in an October 2025 framework post that boards should incorporate AI oversight roles into committee charters. The group said AI should be integrated into enterprise risk management and that boards should establish authority and responsibility for AI inside the organization. That puts familiar audit topics around a newer technology stack: internal controls, data governance, vendor exposure, model monitoring and escalation paths. (corpgov.law.harvard.edu) The work is moving toward routine committee process because AI is showing up in finance, compliance, cyber and operations at the same time, according to the guidance. ### Why are compensation committees now part of the story? (societycorpgov.org) Microsoft said in its 2024 proxy statement that it “enhanced” its fiscal 2025 executive compensation program to align pay with the company’s AI platform shift. The disclosure did not create a separate AI quota, but it showed how a compensation committee can tie executive pay to AI as a strategic priority. Farient, an executive compensation adviser, said in January 2026 that compensation committees are taking on a broader role related to talent management and AI, including incentive design and executive performance evaluation. (kpmg.com) Pearl Meyer said in a 2025 executive pay survey summary that compensation committees are dealing with AI’s potential effect on financial results and plan design. Those advisory materials stop short of a universal rule, but they show pay committees are being drawn into the governance question once AI goals appear in bonus plans. (sec.gov) ### What does this mean for director recruiting and committee charters? NACD said in its September 2025 “Implementing AI Governance” guidance that the board, often through the nominating and governance committee, must ensure it has the AI proficiency and governance structures needed for effective oversight. NACD said 62% of director respondents were setting aside agenda time to discuss AI. (farient.com) Spencer Stuart said nominating and governance committees should evaluate board composition and future boardroom needs as part of succession planning. Deloitte said directors need enough AI fluency to ask the right questions. Together, those materials point to a practical next step: boards are revising charters, education plans and search specifications rather than treating AI as a standalone technical briefing. (nacdonline.org) 2026 proxy statements, annual committee agenda updates and newly posted charters will provide the next evidence of how companies divide AI oversight among the full board, audit, compensation and nominating committees. Microsoft’s 2025 proxy, KPMG’s 2026 agenda materials and NACD’s governance guidance already give directors a template for where those assignments are heading. (microsoft.gcs-web.com) (spencerstuart.com)