In 2024, AI-related expertise in director biographies and skills matrices jumped to 44%—up from just 26% the year before. Board-level AI oversight assignments increased nearly fourfold, from 11% to 40% of companies. The message is clear: AI competency has moved from "nice-to-have" to governance imperative.
Yet most board skills matrices haven't caught up. They still prioritize categories designed for a pre-AI governance era. Here's how to rebuild yours for 2025 and beyond.
Why Traditional Skills Matrices Fall Short
The typical board skills matrix includes categories like:
- Financial expertise
- Industry experience
- International operations
- Risk management
- Human capital
These remain important. But they miss critical capabilities that NACD's 2025 research shows boards now desperately need:
- Only 12% of companies feel "very prepared" to assess AI governance risks
- 42% lack any policies governing employee AI use
- 75% have no dedicated plans for generative AI risks
- Only 27% have incorporated AI governance into committee charters
The gap between what boards face and what skills matrices measure has never been wider.
The 2025 Skills Matrix Framework
A modern board skills matrix should evaluate directors across three tiers:
Tier 1: Foundational Competencies (Every director should possess)
These represent baseline governance capabilities:
- Strategic leadership and judgment
- Financial literacy
- Risk oversight fundamentals
- Stakeholder perspective
- Ethical reasoning
Tier 2: Strategic Expertise (Collective board coverage required)
These must be represented across the full board:
- Industry-specific knowledge
- Capital markets and M&A
- International operations
- Cybersecurity awareness
- ESG and sustainability
- Technology and digital transformation
- AI and data governance ← New priority
Tier 3: Emerging Capabilities (Access required, not necessarily board seats)
These may be covered through advisors or rotating specialists:
- Generative AI applications
- Climate transition planning
- Geopolitical risk analysis
- Activist investor response
Defining AI Competency for Directors
Not every director needs to be an AI expert. But boards must distinguish between three levels of AI literacy:
Level 1: Awareness (All directors)
- Understanding of how AI impacts the company's industry
- Ability to ask informed questions about AI initiatives
- Recognition of AI risk categories (bias, privacy, security)
Level 2: Fluency (At least 2-3 directors)
- Familiarity with machine learning concepts and limitations
- Understanding of AI governance frameworks
- Ability to evaluate AI strategy and investment decisions
Level 3: Expertise (At least 1 director or dedicated advisor)
- Deep technical or operational AI experience
- Ability to assess AI vendor claims and technical feasibility
- Understanding of regulatory landscape (SEC disclosure, NY DFS requirements)
The SEC's cybersecurity disclosure rules—requiring companies to disclose whether board members have cybersecurity expertise—signal where AI governance requirements are heading.
Practical Steps for Matrix Reconstruction
Step 1: Assess Current State
Survey each director on:
- Self-rated AI/technology familiarity (1-5 scale)
- Specific AI-related experience (projects led, boards served, training completed)
- Comfort level with AI governance decisions
- Willingness to develop AI competency
Most boards discover significant gaps once they ask these questions directly.
Step 2: Map Against Strategic Priorities
Align your matrix with the company's actual AI exposure:
- Where does AI impact operations today?
- What AI investments are planned in the next 3 years?
- What AI-related risks could materially affect the business?
- What regulatory requirements apply or are emerging?
Step 3: Identify Coverage Gaps
With current state and strategic needs mapped, gaps become visible:
- Which Tier 2 capabilities lack board-level representation?
- Are there enough Level 2 AI-fluent directors to support meaningful oversight?
- Does the board have access to Level 3 expertise when needed?
Step 4: Build the Development Plan
Close gaps through four mechanisms:
- Recruitment: Prioritize AI-fluent candidates for upcoming board seats
- Development: Provide structured AI education for current directors
- Rotation: Refresh specialist seats to match evolving strategic needs
- Advisory access: Establish relationships with external AI experts
Committee Assignment Considerations
Where does AI oversight belong? The data shows a shift:
In previous years, audit and risk committees held primary AI responsibility. In 2024, full board oversight became the leading choice—reflecting recognition that AI transcends any single committee's scope.
Consider a hybrid approach:
- Full board: Strategic AI decisions, major investments, enterprise-wide policy
- Audit committee: AI-related financial reporting, internal controls
- Risk committee: AI risk identification, mitigation monitoring
- Technology committee (if exists): Operational AI initiatives, vendor management
The Bottom Line
Your skills matrix is a governance tool, not an HR exercise. If it doesn't reflect the capabilities your board actually needs to oversee the business effectively, it's not serving its purpose.
The 44% of boards now disclosing AI expertise aren't ahead of the curve—they're responding to what shareholders, regulators, and the market already expect. The 56% that haven't updated their approach are the ones taking the real risk.
Start with an honest assessment. Update your categories. And build the board your company needs for the governance challenges already here—not the ones from five years ago.
---
Need help assessing your board's AI readiness or identifying directors with technology governance experience? [Reach out to GracePeak](/contact) to discuss your board composition strategy.