AI Governance for SMEs and Micro-Businesses

Nov 3 / Darren Winter

I’m proud to share that my article on AI ethics and governance has been published in BCS ITNOW, the magazine of BCS, The Chartered Institute for IT. It appears in Issue 3, 2026, an issue focused on where AI is actually working.


Why I wrote it
Through my doctoral research in AI ethics and my work training professionals at Duco Digital Training, I see the same pattern again and again. Organisations want to use AI responsibly, but ethics often arrives too late. It becomes a post-launch review instead of a habit built into how AI is designed, bought, and deployed.

The regulatory direction is clear. The UK Government’s evolving approach to AI, the ICO’s guidance on AI and data protection, and the EU AI Act’s phased rollout through 2026 and 2027 all point the same way. Organisations are expected to think ethically from the start.

One size doesn’t fit all
What “good” looks like depends heavily on the size of the organisation, so the article sets out three routes.

In micro-businesses, there may be no board or formal review process, but there can still be a habit. Ask whether AI is needed at all, whether the decision is proportionate, and whether the impact on people has been properly understood. Walking through the user journey is a simple and powerful check. Could someone be excluded, misrepresented or given a result they cannot understand or challenge?

In SMEs, ethics becomes a shared responsibility, and this is where AI Champions come in. A good champion isn’t there to block innovation. They notice patterns, ask structured questions, and connect AI decisions to real conversations about operations, procurement and customer experience. This stage also needs investment in AI literacy for managers, procurement teams and front-line staff.

In large organisations, ethics needs structure and independent oversight, usually through an AI or ethics board that reflects technical, legal, operational, customer-facing and leadership perspectives. Its role is to test whether a system is fair, transparent, explainable and defensible, even when the system is commercially attractive.

The takeaway
The organisations most likely to succeed will start simple, then scale. They will ask the right questions early, build capability through people, and add structure when they grow large enough to need it.


If you’d like to build AI literacy and governance capability in your team, take a look at our accredited AI courses or get in touch.
Created with