Boston Consulting Group and Harvard Business Review have both confirmed a trend visible in advisory work across the region: a widening gap between AI governance policy and operational reality. Leadership teams are racing to deploy AI while underinvesting in the two things that make it safe and effective — culture and capability.

The result is what deserves to be called “compliance theatre” — frameworks that read well in a board pack but fail to build real resilience. Boards are manufacturing the appearance of safety while neglecting the human systems that actually manage risk.
The GloCal Reality Check:
Global governance codes assume a baseline of technical fluency and organisational maturity that many ASEAN boards, mid-market and family-owned enterprises alike, simply have not built yet. Importing a Western AI-governance checklist without first strengthening the underlying culture produces exactly the theatre this piece is naming — process without protection.
Two disciplines have to move together, not sequentially:
- Architecting the engine for AI and efficiency — the data-driven systems required to deploy AI at scale, built with the same rigour as any large industrial operation.
- Strengthening the framework for culture and governance — proving, as a foundational review of the ASEAN Secretariat did, that a strong culture with genuinely empowered people is the bedrock the “S” and “G” of ESG actually rest on.
Sustainable growth is only created when the engine of technology and the culture of the organisation are fused, not merely aligned on a slide. A board that treats these as separate workstreams — one for IT, one for HR — will keep producing paper trails instead of capability.
The Boardroom Takeaway:
Your AI’s potential will always be capped by your people’s potential. The question every board should be asking is not whether an AI governance policy exists, but whether it is building genuine capability — or just a defensible paper trail.

