Governance and Culture: Foundations for Secure AI Adoption

Written by Fed Gov Today | Nov 6, 2025 10:25:51 PM


Presented by Box & Carahsoft

At the Google Public Sector Summit, Jason Gray, Managing Director for Global Federal Government at Box, drew on his experience as a former CIO at both the Department of Education and USAID to highlight how governance, agility, and culture intersect in successful modernization.

“Agencies have to bring governance, security, and privacy to the table from the start,” Gray said. “That means a cross-functional approach—mission owners, privacy leaders, and security experts all working together before a single line of code is written.”

He explained that effective governance ensures agencies know where their data lives, who can access it, and how it’s being used. “Transparency and explainability are critical,” he said. “When you’re dealing with AI and citizen-facing data, people must be able to validate what they see.”

Gray pointed to Box Shield as an example of how technology can support that governance model, with built-in capabilities for data classification, categorization, and search across an entire content ecosystem. “That visibility helps agencies maintain compliance and trust while still innovating quickly,” he said.

Drawing from his time in government, Gray emphasized the importance of agility. “Modernization is constant,” he said. “Technology evolves daily. Ten years ago, AI looked completely different than it does today. Agencies have to stay agile and adjust as environments change.”

That agility begins with a clear understanding of one’s own landscape. “You have to know your baseline,” he said. “Understand your environment and what you’re accountable for. With that clarity, you can modernize confidently and measure real progress.”

Gray underscored that while technology is vital, culture is the real differentiator. “It’s not about saying no; it’s about finding a safe, secure, scalable way to yes,” he said. “That mindset shift—toward mission-centric collaboration—is what allows real innovation.”

He noted that when strategies and policies are too rigid, they can stifle progress. “If your policy is too constrained, stakeholders say you can’t do this because of that. But if it’s too vague, everyone interprets it differently,” Gray explained. “The sweet spot is a policy that’s clear enough to guide action but flexible enough to evolve.”

Ultimately, he said, leadership must anchor strategy in mission outcomes. “Every modernization effort should answer: why are we doing this? What impact are we driving?”

Even after leaving government, Gray remains motivated by that sense of purpose. “I may not be a federal CIO anymore, but I still serve the federal mission,” he said. “Now, instead of helping one agency, I get to help them all.”

Key Takeaways

  • Strong governance and explainable data practices are essential for secure AI adoption.

  • Agility requires understanding your baseline environment and building flexibility into strategy.

  • A collaborative, “secure-way-to-yes” culture drives modernization across government.