← Back to Insights

"Move Fast" And "Stay Secure" Aren't Actually In Tension

Notes from the practice

Most firms treat AI governance as a phase-two problem: adopt first, figure out the guardrails once something goes wrong. The tension people feel between speed and security isn't inherent to AI adoption — it's a symptom of that ordering.

When review gates, security checks, and an audit trail are designed in from the first commit, they don't slow adoption down. They run alongside it. The slowdown people actually experience comes from retrofitting oversight onto something already shipped — reverse- engineering what changed, why, and whether it was safe, after the fact.

The practical version of this: before the first AI-assisted change ships, know who owns the review, what gets checked automatically versus by a person, and where the record of that review lives. That's a same-day setup cost, not a project.

The firms that move fastest on AI long-term are usually the ones that did this early — not the ones that skipped it.