The Governed Enterprise

An AI Governance Playbook for Consumer Goods

Non-Fiction - Business/Finance
469 Pages
Reviewed on 08/15/2026
Buy on Amazon

Author Biography

Robin Horstmann is a technology leader in consumer packaged goods. She implements agentic AI for accounting and manufacturing and builds the foundations it runs on.

Her background is in the systems a company depends on: ERP implementation and recovery, enterprise architecture, cybersecurity, and warehouse and transportation management. That work has run inside consumer goods for twenty years, which is why the controls get built with the system rather than bolted on after it.

The categories behind it are packaged food, pet food, wellness products, licensed apparel, and home textiles. Those five answer to four regulatory regimes. Pet food answers to AAFCO. Packaged food answers to FDA under FSMA. Wellness sits between FTC substantiation and an FDA drug claim. Licensed apparel carries contractual and intellectual property obligations food does not.

She wrote this book because it did not exist. While earning the IAPP's Artificial Intelligence Governance Professional credential, she went looking for a governance reference written for consumer goods and found only frameworks built for banks, insurers, and general enterprise. A bank does not run a recall. Nothing written for one could tell a brand owner what to do at six in the morning when a co-manufacturer's AI quality system has been approving batches for three weeks and a consumer has found metal fragments. She wrote the playbook afterward.

Her certifications cover AI governance (AIGP), AI security (AAISM), risk and IT controls (CRISC), information security (CISM), data privacy (CDPSE), and delivery (PMP).

    Book Review

Reviewed by Mansoor Ahmed for Readers' Favorite

The Governed Enterprise by Robin Horstmann is the most practical guide to AI governance currently available for senior leaders in consumer packaged goods companies. Horstmann opens with two scenarios that would stop any executive cold: a 2:00 AM call about an AI procurement agent that just committed $847,000 to a fraudulent supplier with no spending limits or approval controls in place, and a 6:00 AM call about a co-manufacturer's AI quality system that missed metal contamination in a food product for three weeks before a consumer complaint triggered a full recall. Both scenarios are not hypothetical. They are what happens next in organizations running AI systems that nobody formally approved. The book then builds a complete governance framework across seven parts, covering the three types of AI that matter for CPG companies, how to write policies that plant floor workers and boardrooms will follow, how to govern vendors and co-manufacturers, how to classify data, how to assess risk, how to respond to incidents, and how to build a culture that makes governance stick beyond the policy document.

Robin Horstmann writes with the brisk, no-patience-for-abstraction authority of someone who has spent over thirty years in operations and knows exactly what keeps executives awake at night. Each chapter closes with concrete next steps, and Appendix A consolidates everything into a ninety-day implementation roadmap marked with minimum viable actions. I was particularly struck by the central argument that governance is not the brake but the foundation that lets you accelerate, a reframe that immediately changes how every chapter lands. The themes of accountability, defensibility, and competitive advantage through governance run through every page with real conviction. For any CPG executive whose company is already using AI without a governance framework, The Governed Enterprise is not optional reading.