Artificial Intelligence, cybersecurity, digital transformation, and emerging technologies have significantly increased the governance responsibilities of boards and executives. Faced with growing complexity and increasing regulatory expectations, many organisations have responded by appointing technology experts as independent advisors or recruiting board members with technology backgrounds.

This is both understandable and desirable. Boards should have access to appropriate expertise when exercising their governance responsibilities. However, many organisations make a critical mistake—they assume that appointing a technology expert solves their technology governance challenges.

It does not.

Technology expertise and technology governance are not the same thing.

A technology expert understands how technologies work, how they should be implemented, and how technical problems can be solved. Governance, on the other hand, is concerned with leadership, ensuring accountability, value creation, risk oversight, and strategic direction. One discipline complements the other, but neither replaces the other.

The role of a technology expert is therefore not to govern technology on behalf of the board. Rather, it is to provide independent and objective advice that enables the board to fulfil its governance responsibilities more effectively.

What technology advisors should do

Technology advisors should help boards to:

• understand strategic opportunities and risks arising from technology;
• appreciate the implications of emerging technologies such as AI and cybersecurity developments;
• interpret management’s proposals and recommendations;
• ask better questions; and
• strengthen independent oversight of technology-related matters.

What they should not do is make governance decisions on behalf of the board.

Unfortunately, some boards unintentionally become overly dependent on their technology advisors. Discussions become less about exercising independent judgement and more about accepting expert recommendations without meaningful challenge. Directors may feel uncomfortable questioning technical matters and assume that the expert’s opinion is necessarily the correct one.

This creates a new governance risk—the transfer of independent judgement from the board to the expert.

Technical expertise, valuable as it is, does not automatically translate into governance expertise.

An excellent cybersecurity specialist may not necessarily possess the broader perspective required to balance organisational strategy, stakeholder expectations, regulatory obligations, financial considerations, and long-term value creation. Governance requires boards to consider all of these factors simultaneously.

The most effective technology advisors recognise that their role is not to provide all the answers. Instead, they equip boards to ask the right questions.

A useful test is this: after receiving advice from a technology expert, is the board better able to exercise its own independent judgement? If the answer is yes, the advisor is fulfilling their role appropriately. If the board simply accepts the recommendation without meaningful deliberation, the advisor may unintentionally have become the decision-maker.

Technology governance cannot be delegated.

Boards may delegate management responsibilities. They may appoint advisors. They may seek specialist expertise. What they cannot delegate is accountability.

The board remains responsible for ensuring that technology supports organisational objectives, delivers value, manages risk appropriately, and contributes to long-term organisational success.

Technology experts have an indispensable role to play in helping boards achieve these outcomes. Their greatest contribution, however, is not making decisions for leaders—it is empowering leaders to make better governance decisions for themselves.

Ultimately, technology experts should inform governance, not become governance.

Ten Things a Technology Advisor Should Never Do

Here are things a technology governance advisor should avoid to truly add value to their role:

1. Make Governance Decisions on Behalf of the Board
   • Advisors provide independent and objective advice. They do not determine the organisation’s technology strategy, risk appetite, or governance priorities.
2. Assume the Board’s Governance Responsibilities
   • Accountability for technology governance cannot be delegated. The board remains accountable for directing, overseeing, and monitoring technology-related matters.
3. Promote Particular Technologies Without Considering Business Needs
   • Recommendations should be driven by organisational strategy, value creation, and risk considerations—not by personal preferences or technology trends.
4. Act as an Extension of Management
   • A technology advisor should maintain independence and avoid becoming an advocate for management’s proposals. Their role is to provide objective advice that enables informed decision-making.
5. Discourage Meaningful Challenge and Debate
   • Advisors should welcome questions and differing viewpoints. If board members feel unable to challenge recommendations because they are “too technical,” governance has been weakened rather than strengthened.
6. Overstep Their Mandate by Managing Technology Initiatives
   • Unless specifically engaged in a management or consulting role, technology advisors should not become de facto CIOs, programme managers, or solution architects for the organisation.
7. Reduce Governance Discussions to Technical Matters
   • Technology governance discussions should focus on strategic alignment, value, risk, accountability, and performance—not merely on systems, products, or technical specifications.
8. Ignore Organisational Context
   • What works well in one organisation may be entirely inappropriate for another. Advisors should avoid recommending “best practices” without considering organisational strategy, capabilities, culture, and risk appetite.
9. Create Dependency
   • The objective of a technology advisor should be to build the board’s confidence and capability. Boards should become more effective at governing technology over time—not increasingly dependent on external expertise.
10. Become the Technology Governor
    • Perhaps the greatest danger is when the advisor becomes the board’s technology conscience, effectively making decisions that directors simply endorse. Advisors should inform governance—not become governance.

What has been your experience with a technology advisor on your organisation’s governing body?