Aligning C-Suite and CIO: Lessons in AI Governance

Isaac del Toro nearly won the 2025 Giro d'Italia as a rookie. For 19 stages, UAE Team Emirates worked perfectly. Then Stage 20 arrived. Simon Yates attacked on the Colle delle Finestre. Del Toro's teammates evaporated. Leadership in the team car wasn't unified. Tactics weren't clear. Del Toro rode alone and lost — finished second, seconds from victory.

This year at the Tour de France: same rider, same team, same pressure moment on Stage 20. But this time, leadership stayed unified. Pogačar directed strategy. Teammates protected del Toro. The team's alignment held. Del Toro finished third overall and won the white jersey.

Same organization. Same crisis point. What changed? The 2025 team didn't know how to stay aligned when Stage 20 arrived. The 2026 team did.

My quarterly CEO-CIO advisory calls reveal the same pattern: enterprises are riding fine together — until the pressure peaks. Then they're in different races.

The Disconnect That's Costing You Millions

In boardrooms across Mexico and LATAM:

The C-Suite views AI as a revenue accelerator. Launch a chatbot, cut headcount, improve CSAT, go live in 90 days.

The CIO views AI as a compliance minefield. Hallucinations. Prompt injection attacks. Data breaches. Discriminatory models.

Both are right. Both are incomplete. Neither has explicitly asked the other what "good enough" looks like under pressure.

What I almost never hear:

CEO: "We have 90 days to deploy. What can you deliver?"

CIO: "With these three mitigations, 90 days works. If we hit Stage 20, here's our escalation framework."

CEO: "Agreed. That's our guardrail."

What I see instead:

CEO: "Our competitors already launched." 

CIO: "We haven't audited the training data."

Both think they agreed. On Day 75, they discover they were having completely different conversations.

Your AI Strategy Has 19 Good Stages. Then Comes Stage 20.

Most enterprises have decent AI governance frameworks. Policies. Review gates. But they don't have alignment on what happens when the pressure peaks.

Stage 20 is when you need to deploy a customer-facing LLM in 72 hours because a board member demanded it. Or when a customer demands a model trained on proprietary datasets. Or when a competitor launches something that changes the market window.

Here's what happens:

CIO: "We need four more weeks for validation."

CEO: "Market window closes in two weeks. Get it live."

Neither is wrong. They're just riding different races. They haven't pre-decided who decides.

Del Toro's team had clear understanding for 19 stages: protect the pink jersey. But on Stage 20, leadership wasn't unified on how to adapt under pressure. Del Toro rode alone and lost.

Your team is doing the same thing right now—you just haven't hit Stage 20 yet.

Why This Matters

Del Toro didn't lose because he was weak. He lost because his team's alignment broke when it mattered most.

You will face Stage 20. A board mandate will collide with a security concern. A market window will compress. At that moment, your CEO and CIO will either have pre-decided answers or a conflict in real time.

Conflicts in real time, under pressure, get resolved by whoever has more political power—not by whoever is right about the risk.

The companies that win settled this in a quiet room on Tuesday, not under fire on Stage 20.

The Three-Question Test (Do This This Week)

If your CEO and CIO genuinely agree on AI strategy, they should answer these three questions identically and independently:

Question 1: "If we have 60 days to launch and security review takes 90 days, what happens?"

If they say different things, you have political misalignment—you haven't pre-decided whose answer wins when pressure peaks. Your answer should be: "We expedite to 48 hours with these three mitigations" or "We delay and take the market risk" or "We use framework X to decide." You must have a pre-decided answer. If you're debating it when pressure hits, you lose.

Question 2: "Can you explain in plain language why our most recent AI model made a consequential decision?"

Your CEO should get an answer by Monday morning. If the answer is "the team is too busy shipping," you have an alignment problem disguised as capacity. This decision — that explainability is a prerequisite — lives at the C-Level, not in security.

Question 3: "Who decides when we launch, and under what conditions does the other person have veto?"

Example answers: "CIO has veto if model drift exceeds X." "CEO has veto if market window closes below Y." "Either can escalate to the board if the other's position risks >Z dollars."

The specific answer matters less than that you have an answer before Stage 20.

The Political Reality

When a CEO and CIO sit down to "align":

CEO: "We need to move faster. What do you need from us?"

CIO: "Visibility into training data, validation protocols, monitoring dashboards, incident response playbooks."

CEO hears: "Security wants to slow us down again." CIO hears: "The business doesn't care about risk."

They nod, leave thinking they align. They don't. They just agreed to not argue until they have to.

Alignment is not agreement. Alignment is pre-decided escalation paths and decision rights.

Real alignment:

CEO: "Market window: 90 days. Risk band: we won't deploy models we can't explain, and we can't accept breaches costing >$5M."

CIO: "In 90 days, here's what I can deliver. Here's what I can't. Here's our Stage 20 escalation framework."

CEO: "Agreed. You own security. I own market window. If they collide, we escalate together."

That conversation takes 90 minutes. Most CEO-CIO pairs never have it.

2nd Place vs. 3rd Place

Del Toro finished second in the 2025 Giro because his team didn't pre-decide what "protecting the leader on Stage 20" meant. He finished third in the 2026 Tour because they had pre-decided. No second-guessing. No conflicting signals. No isolation.

You can build perfect frameworks for stages 1–19. But if your CEO and CIO haven't pre-decided who leads on Stage 20, you'll lose to a competitor that has.

Not because they have better technology. Because they have better governance under pressure.

If you and your CIO cannot answer those three questions the same way, you are not aligned. You are just not fighting yet.

Start the real conversation this week.