Regulatory Consulting at Aon Public Sector (Aon Inpoint)

Overview

Aon is a global professional-services firm best known for risk, retirement, and health solutions, and its AI-policy relevance runs through a distinct and increasingly important lane: AI as an insurable, quantifiable risk category. Rather than building or governing AI systems directly, Aon analyzes how AI reshapes the risk landscape that governments, insurers, and enterprises must underwrite, disclose, and prepare for — publishing a dedicated ‘AI Risk Management’ fact sheet for professional-services firms and a 2026 outlook, ‘AI Risk 2026: What Business Leaders Need to Know,’ aimed at helping organizations turn AI risk into a source of long-term advantage rather than a blind spot. That risk-and-insurance framing is a genuinely distinct angle among the firms in this directory: while most focus on governance frameworks or policy advocacy, Aon quantifies what happens when AI governance fails — and prices the consequences.

AI-Focused Regulatory Work

Aon’s 2026 AI risk outlook, delivered by Brent Rieth (Aon’s Head of Global Cyber Solutions), makes a pointed argument: AI is ‘changing the risk landscape faster than traditional frameworks can adapt, and the organizations that invest early in transparent governance, scenario analysis and insurance alignment will be best positioned to adopt AI safely.’ The report catalogs concrete, already-realized AI risk events that quantify the stakes — citing a World Economic Forum account of a $25 million deepfake-enabled fraud against engineering firm Arup, documented cases of malicious AI models distributed on Hugging Face exploiting novel attack techniques, and researchers demonstrating zero-click prompt-injection attacks against popular AI agents at Black Hat — grounding its risk framework in real incidents rather than hypothetical scenarios. For professional-services and government-adjacent clients specifically, Aon’s fact sheet on AI risk management lays out evolving best practices tailored to the liability and insurance exposure unique to firms that advise others on AI adoption. This risk-and-insurance lens is a genuine complement to the governance-framework work found elsewhere in this directory: where a think tank might argue for AI transparency requirements in principle, Aon’s contribution is to show what an insurer actually needs to see before it will underwrite an AI-related liability — transparent governance, documented scenario analysis, and demonstrable risk controls. For a directory reader focused on how AI risk gets operationalized beyond the policy paper, Aon fills a distinctive niche: the actuarial and insurance-market view of what ‘responsible AI’ costs to get wrong.

Notable AI Policy Work

• Published ‘AI Risk 2026: What Business Leaders Need to Know,’ featuring Head of Global Cyber Solutions Brent Rieth on the need for transparent governance, scenario analysis, and insurance alignment as AI risk outpaces traditional frameworks.
• Documented concrete realized AI-risk incidents — including a $25 million deepfake-enabled fraud against engineering firm Arup, malicious AI models distributed via Hugging Face, and zero-click prompt-injection attacks on AI agents demonstrated at Black Hat.
• Published a dedicated ‘Artificial Intelligence Risk Management in 2025’ fact sheet for professional-services firms, addressing the liability and insurance exposure unique to firms advising clients on AI adoption.
• Provides D&O (directors and officers) insurance market analysis flagging technology, life sciences, and financial-services sectors — those most exposed to AI-related governance and disclosure risk — for heightened 2026 underwriting scrutiny.
• Applies a distinct risk-and-insurance lens to AI governance, complementing policy-framework-oriented firms by quantifying what transparent AI governance is worth in reduced insurance and liability exposure.

Thought Leadership

1. AI Risk 2026: What Business Leaders Need to Know
   Aon’s 2026 AI risk outlook, grounding governance recommendations in real incidents — the Arup deepfake fraud, malicious Hugging Face AI models, and agentic-AI prompt-injection attacks.
2. AI Risk Management in 2025 (Professional Services Fact Sheet)
   Aon’s evolving AI risk-management best practices tailored specifically to professional-services firms’ liability and insurance exposure.

Clients

Global corporations, professional-services firms, and public-sector entities purchasing risk, insurance, and cyber-risk advisory services. Aon Inpoint provides data-and-analytics consulting to insurance carriers and brokers navigating AI-related risk products.