Oct 22, 2026 · 33 min
Organizations build AI governance before regulators settle
The early bird gets the exploit.
The episode connects fast-moving AI risks with the practical controls organizations can establish now, while showing how platforms are responding to synthetic-content abuse.
- 1AI governance starts with clear ownership, inventories, policies, and visibility into shadow AI—not regulatory certainty.
- 2ISO 42001, NIST, and AIUC1 give organizations frameworks for assessing AI risks and demonstrating meaningful oversight.
- 3Spotify’s removal of millions of low-quality and spammy tracks shows how AI-generated content is reshaping platform governance.
Don't miss
Danny Manimbo lays out the concrete building blocks of AI governance—ownership, inventories, policies, and visibility into shadow AI—without waiting for regulatory certainty.
The brief
Danny Manimbo of Schellman argues that organizations should begin AI governance now, even as Colorado legislation and broader regulatory expectations continue to change.
The practical starting point is not paperwork: assign ownership, create an inventory of AI use, establish policies, and expose shadow AI across the organization.
Manimbo distinguishes meaningful impact assessments from compliance theater, pointing to ISO 42001, NIST, and AIUC1 as tools for building accountable programs.
The episode widens its lens to Spotify, which removed more than 50 million spammy or low-quality tracks from recommendations and another 75 million from its platform.
Together, the stories show two sides of AI governance: organizations must manage how they use AI, while platforms must manage what AI produces.
Weekly email
State of the Pod, every Monday
The week's most-discussed names and stories from podcasts, with the moments behind them. Free, five minutes, unsubscribe in one click.