How NYPA Manages AI Governance Inside ClearPoint

The New York Power Authority (NYPA) is the largest state-owned electric utility in the United States. It runs generation, transmission, and energy-efficiency programs across New York State. In an operation that complex, a new initiative rarely arrives alone. When AI governance moved from a future concern to a present one, NYPA did not stand up a separate program to manage it. It used the system of record it already had: ClearPoint Strategy.

This post looks at how a large public power organization can run AI governance as part of its existing strategic management discipline, not as a parallel process bolted on. Where a specific figure is still being confirmed with NYPA, we say so rather than guess. The point is the operating pattern, and it holds whether an organization governs three AI tools or thirty.

Why a separate AI governance system is the wrong instinct

When a new compliance domain appears, the reflex is to build something new for it: a fresh spreadsheet, a separate owner list, a standalone review meeting. AI governance feels novel, so the reflex is strong. But a parallel system fails. It drifts out of date, and no one in particular owns it. When a board member or auditor asks "what is the status of our AI program," someone has to assemble the answer by hand from a place no one looks at the rest of the year.

The alternative is to treat an AI initiative like any other strategic initiative: give it an owner, a status, a risk tier, measurable outcomes, and a review cadence, inside the same system you already use to run the rest of the organization. NYPA did this, and any public-sector organization with a strategy-management practice can do the same.

How AI governance runs inside ClearPoint

ClearPoint is a system of record for strategy and performance. The same structure that tracks an operational objective or a capital project works for an AI initiative without modification. In practice that means four things, and they line up with the four functions of the NIST AI Risk Management Framework: GOVERN, MAP, MEASURE, MANAGE.

• A named owner for every AI initiative (GOVERN). Accountability goes to a person, not a committee. Each entry names who is responsible for its performance, its risk, and its compliance posture. That is the most important field, and the one most governance efforts get wrong.
• One catalog of AI initiatives (MAP). Every AI tool and use case lives in the same initiative portfolio, with its department, purpose, data sensitivity, risk tier, and current status. Everything else depends on this inventory. You cannot govern what you have not first written down.
• Status and risk you can actually see (MEASURE). Outcome and risk indicators are tracked against targets, so leadership sees what is on track, what is drifting, and what is overdue across the whole AI portfolio at once, not tool by tool.
• A documented response when something slips (MANAGE). When an indicator goes off track, a corrective action is created with an owner and a due date, and the record of detection-to-resolution stays attached. That trail is the evidence regulators and auditors ask for.

None of this is a special "AI module." It is ClearPoint's general strategy-execution model of owners, statuses, risk tiers, and reporting, applied to a new domain. That is why it scales: adding the next AI initiative needs nothing new.

Board-ready reporting in minutes, not days

Most leaders feel the payoff first in reporting. The AI portfolio lives in the same system as everything else and is updated as work happens, so a board-ready summary is an export, not a week of assembly. When a board or an auditor asks where AI governance stands, you pull the report from live data in minutes: initiative status, performance against targets, open risks, and the compliance trail.

ClearPoint's built-in AI assistant goes further. ClearPoint AI can draft executive and board report summaries covering the wins, the red flags and where attention is needed. It can also turn recommendations into tracked action items with owners and due dates. (ClearPoint is SOC 2 and CCPA aligned, and never trains its models on customer data.) The report comes together on its own instead of eating the days before every board meeting.

One system for strategy, compliance, and AI governance

For a utility, AI governance is neither the only reporting obligation nor the most demanding one. Running it in the same system of record as the rest of the organization's strategy and compliance work brings shared review cadences, one audit trail, and consistent ownership across domains. AI governance becomes an extension of an existing discipline, not a new program competing for attention.

The broader lesson for public-sector AI governance

NYPA's instinct was to inventory first, then govern from the existing system. The evidence keeps reaching the same conclusion. You cannot govern what you have not catalogued, and most organizations have not catalogued it. The U.S. Government Accountability Office found that only 5 of 20 federal agencies it reviewed kept a complete and accurate inventory of their AI use cases. Closer to home for NYPA, the New York State Comptroller's office reported in 2025 that the state's AI policy "lacks adequate guidance" and that the Office of Information Technology Services "does not have an inventory of AI systems in use by state entities." A policy can exist on paper and still produce no governance, because governance starts with knowing what you have.

That is why the inventory comes first in every serious framework. In the NIST AI RMF, MAP (establishing context and cataloging your systems) is the foundation that MEASURE and MANAGE are built on, while GOVERN (culture, policy, and accountability) runs across all three. An AI initiative with no owner and no entry in a catalog is, by definition, ungoverned.

The failure point is almost always ownership, not tooling. ClearPoint's own platform data shows the pattern at scale.

Across 200+ organizations and 360,000+ tracked measures, ClearPoint shows which measures still need an owner, and objectives with an owner are more likely to be on track (23.6% vs. 10.6%). AI governance follows the same rule. The organizations that will govern AI well already make ownership visible: every initiative has a name attached, a status anyone can read, and a report that pulls itself together.

What other public-sector organizations can learn

NYPA's approach is not utility-specific. Whether you are a city, a county, a health system, a university, or a state agency, the pattern is the same five moves:

1. Inventory every AI tool in one catalog: sanctioned, embedded, and shadow.
2. Assign a named owner to each one. A tool no one will own should not keep running.
3. Track status and risk against targets, so drift is visible before it becomes an incident.
4. Respond on the record when something slips, with an owner, a due date and an audit trail.
5. Report from live data, in the same system you use for the rest of your strategy.

Do all five in one place, and AI governance stops being a separate burden and becomes a view into work you are already managing. For the full framework behind these moves, see our complete 2026 guide to AI governance and the deeper dive on why an AI initiative inventory is the first step to governance. To see how this fits into a broader strategy-management practice, start with the comprehensive guide to strategic planning.

Run AI governance in the system you already use

The lesson from one of the country's largest public power organizations is simple. AI governance does not require new infrastructure. It requires extending the strategic-management discipline you already have (owners, statuses, risk tiers, and live reporting) to cover a new domain.

See how ClearPoint would run your plan — book a demo

Frequently asked questions

Is NYPA a ClearPoint customer?

Yes. The New York Power Authority, the largest state-owned electric utility in the United States, uses ClearPoint Strategy to manage strategic programs, including AI governance and compliance reporting, in a single system of record.

Can AI governance be managed in a strategic planning platform?

Yes. AI governance needs the same infrastructure as any strategic program: a named owner for each initiative, a catalog of what exists, status and risk tracked against targets, a documented response when something drifts, and board-ready reporting. A strategy-execution platform like ClearPoint already provides all of these, which is why a separate AI governance system is usually unnecessary.

How fast can a board report on AI governance be produced?

Because the AI portfolio is updated as work happens and lives in the same system as the rest of the organization's strategy, a board-ready report is an export from live data, produced in minutes, not days. ClearPoint AI can also draft the executive summary, surfacing wins, red flags, and where attention is needed.