Reading "New York City Council candidate is accused of forgery over AI-generated posts -…" through an AI governance lens

A recent headline — "New York City Council candidate is accused of forgery over AI-generated posts - ABC News - Breaking News, Lat…" — is a useful lens on AI governance.

The short version

Governance answers who decides, what policies apply, and what approvals are required. The practical backbone is well-established: classify the system under the EU AI Act (Europe's AI law) risk tiers, apply the NIST AI RMF functions (Govern, Map, Measure, Manage), and bring it all under an ISO/IEC 42001 AI management system.

Why it matters

As AI moves from assistive (it suggests) to agentic (it acts), small failures compound into operational, legal, financial and reputational harm. The organisations that win won't be the ones that adopt AI fastest — they'll be the ones that can scale it safely, reliably and accountably.

What good looks like

• A living AI system registry (not a spreadsheet that's already stale).
• Clear ownership and approval gates for high-impact use cases.
• Evidence captured as you build, not reconstructed before an audit.
• Policy expressed as checks in the pipeline, not PDFs in a folder.

The takeaway

• Name the AI system, classify its risk, and assign an owner this week.
• Put one real control in the action path (approval gate, redaction, or kill switch).
• Turn on one monitor (drift, fairness, or guardrail breaches).
• Write down your risk appetite so the team knows when to stop, escalate, or redesign.