NORTH
Session NTH-4X7K2 · 9 April 2026 · Sprint initiated
30-Day Recovery Sprint
Recovery Track: Governance
Prepared for Neville Daniels · COO, Harmony Gold Mining
Session: Thabo Khumalo · Priya Naidoo · David Chen · Neville Daniels
42 GOV now
30 days
65 Target
Sprint progress Week 1 of 4 · 25%
Kickoff
Week 1
Week 2
Week 3
Re-score
Why governance is the priority
GOV at 42% is the single dimension holding the overall verdict below Moderate. Without a governance structure in place, velocity and accountability gains have no institutional anchor — and board confidence remains low.
Week 1 · Days 1–7
Foundation & Ownership
In Progress
Appoint AI Governance Lead — designate a named owner for AI oversight within the Exco. This person is accountable for all governance artefacts through Q3.
Neville Daniels Decision
Document existing AI use cases — inventory every active AI application across operations, finance, and digital. No governance without a clear map of what exists.
David Chen Audit 3 days
Draft AI risk classification matrix — categorise each use case by risk tier (low / medium / high). Share with Priya Naidoo for CRO sign-off before Week 2.
Priya Naidoo Risk 2 days
Week 2 · Days 8–14
Policy & Financial Controls
Upcoming
Establish AI budget line item — formalise AI spend as a tracked category in FY2026 financials. Recommended minimum: R2.4m ring-fenced for governance infrastructure.
Thabo Khumalo Finance
Adopt AI Acceptable Use Policy — adapt a sector-appropriate AUP template to Harmony Gold context. Circulate for executive endorsement by Day 12.
All Exco Policy 5 days
Brief the board — Neville to present the NORTH verdict and GOV recovery plan at next board committee. Frame: readiness trajectory, not current deficiency.
Neville Daniels Board
Week 3 · Days 15–21
Accountability Structure
Upcoming
Stand up AI Governance Committee — first formal meeting with COO, CFO, CRO, and Head of Digital. Agree meeting cadence and decision rights for the next 90 days.
Neville Daniels Structure
Implement incident logging protocol — define what constitutes an AI incident, how it is logged, and the escalation path to the CRO. First drill by Day 20.
Priya Naidoo Risk Protocol
Week 4 · Days 22–30
Measurement & Re-score
Upcoming
Audit completion against Week 1–3 commitments — David Chen to produce a one-page delivery register. Any incomplete items escalated to Neville before the re-score session.
David Chen Audit
Run NORTH re-score session — all four participants repeat the diagnostic. Target: GOV moves from 42 to 65, overall readiness from 61% to 74%.
All four Diagnostic Day 30