Inside An HP Leader's 'Porous Principles' For AI Innovation

Most leaders see AI governance as a roadblock—a compliance chore that slows innovation. But now, a new approach is gaining traction, one that reframes governance as a strategic tool for resource allocation. By eliminating redundant efforts, a more porous form of AI governance can help organizations focus on projects that truly differentiate the business.

For an expert's take, we spoke with Aaron Weller, the Privacy Innovation & Assurance Center of Excellence Leader at HP. Having co-founded two startups, led the West Region privacy practice at PwC, guided compliance strategy at tech giants like eBay, and served as both a Chief Information Security Officer and a Chief Privacy Officer, Weller has seen the governance problem from almost every angle. Today, his philosophy reflects a growing reality for many CIOs: the most effective governance functions align finance, IT, and risk teams around shared incentives rather than top-down rules.

"To accelerate innovation, leaders must make their organizations' boundaries porous. Let ideas out, and let ideas in," Weller said. It's a mindset that encourages leaders to look beyond internal checklists and toward external opportunities, he explained. That doesn't mean abandoning security. But it does mean managing risk intelligently.

For Weller, the key is creating controlled "sandbox" environments. Here, teams can experiment with new technologies without connecting them to the main corporate network. "One of the major roles of governance is the resource allocation side, asking, 'Are these the number one things we should be doing in line with our strategy?'' Not duplicating 50 different chatbots." Meanwhile, a too-narrow focus on strategic allocation often clashes with the realities of legacy architecture, he cautioned.

• Complexity's culprits: Somewhere in the backroom of almost every bank, a mainframe is still running transactions, Weller continued. Today, that tangle of old systems hurts the enterprise in two ways: "Complexity is the enemy of security. The more complex it is, the harder it is to secure. But it's also often the enemy of cost control."

• The financial lever: One effective way to drive change is by reframing the conversation around its financial imperatives, he explained. "I asked, 'Have we tried talking to finance about just how much this is costing us?' That's the conversation we're going to have—not so much that we need to change it for technology reasons, but more for cost ones."