Back to Overview
Executive Work Design & AI Transformation

Which work a company should never automate

AI can accelerate work. Business accountability cannot be outsourced. Where assistance creates value, when bounded execution is justified and how leadership should test the boundary before consequential decisions.

Executive Summary

The essentials in one minute

The management problem

The management question is not which roles can be replaced by AI. It is which individual task can accommodate assistance, where an approved rule is sufficient and where a responsible value judgement must remain with the organisation. When these layers are conflated, the result is unclear accountability, control theatre and a fallback process that becomes visible only after a critical case has already occurred.

Why it matters to leadership

A preregistered experiment with 758 BCG consultants, published online in 2026, found that, for a selected complex task outside the identified GPT-4 capability boundary at the time, correct solutions fell by around 19 percentage points compared with the control group. This cannot be generalised to current models, all decisions or all organisations. It does, however, show why the automation boundary must be tested task by task rather than inferred from persuasive examples.

What management should do

As a first step, the executive team appoints an owner for one frequent, business-critical decision. That person breaks the flow down into tasks, documents decision rights, access to source data, the ability to stop and fall back, and determines before a pilot which quality, review-effort and fallback signals will trigger a narrower boundary or a stop.

The wrong question starts with the tool

When an organisation discusses automation, the same hope is usually present: less waiting, less manual work, more capacity. That is legitimate. It becomes problematic when the question turns into which role can still be automated away. A decision about work then quickly becomes a decision about accountability that no one has made explicitly.

My judgement is clear: an organisation should never outsource entrepreneurial responsibility, value judgements and the ability to intervene appropriately to a model. This is not a blanket or permanent ban on technology. Tasks change, models change and tested risk boundaries can change. What does not disappear is the duty of a responsible person to weigh consequences, stand behind a decision and intervene when new information emerges.

The relevant unit is therefore neither the job title nor the entire end-to-end process. It is the individual task in the context of a decision. A model can organise information, check a contract draft against a clause library or flag an exception in a policy. It should not itself decide whether a non-standard contract is acceptable, which customer receives a discretionary exception or how a sensitive personnel conversation should be conducted. These are illustrative situations, not an exhaustive prohibited list.

The distinction matters commercially. When tasks are defined incorrectly, the result is not just errors. It is unclear liability, poor handling of exceptions, an overloaded control team and decisions that no one can explain when challenged. That erodes speed precisely where automation is supposed to create it.

Assistance is not autonomy

I would keep three operating modes clearly separate.

Assistance provides a suggestion, research, a summary or an initial structure. A responsible person reviews and decides. This mode can save considerable time without shifting decision rights.

Bounded, rules-based execution completes a clearly defined action within pre-approved rules. A system may, for example, transfer complete data into an existing system or trigger a standard process when conditions are unambiguously met. Exceptions need a route back to a person.

Autonomous decision-making chooses between options with different consequences. It can determine prices, approvals, priorities or communications. The greater the impact on customers, employees, contractual obligations, safety or reputation, the less sufficient a retrospective glance at a dashboard metric becomes.

This is not a semantic nicety. Contract preparation can be assistance. Deciding on a liability provision is a value judgement under uncertainty. An exception approval may contain a rules-based element. Whether it is fair, appropriate and commercially viable in a specific situation often cannot be derived fully from historical data.

People also make poor decisions and bring their own biases. That does not mean, however, that a human name beside a model recommendation is enough. Human oversight is only oversight when the person is competent, sees the material information, has time to review, is allowed to disagree and has a real ability to stop or fall back.

Why organisations automate too far

The cause is rarely a single poor model. More often, it begins earlier, in how the work is described.

First, tasks are defined too broadly. “Process a contract”, “decide on a customer” or “resolve an employee case” sounds like a task. In fact, each formulation contains research, rule checking, communication, assessment of exceptions and a decision about consequences. When all of this is treated as one automation case, the normative decision quietly moves into the system with it.

Second, model capability is confused with operational acceptability. A plausible draft does not prove that a model may safely make a decision. The question is not only: Can the system produce a good answer in a test? It is also: Does that performance hold in this data context, for this exception, with this pattern of harm and with this fallback process?

Third, the wrong metric is often in the foreground. Those who measure only cases processed or cycle time reward the transfer of difficult cases to downstream teams. Review effort, corrections, escalations and the quality of the final decision then disappear from view.

Fourth, “human in the loop” is used as a label. An approval click at the end of a long chain is not an independent review if the reviewer can understand neither the underlying data nor the rule boundary. Nor is a person under high throughput pressure a robust control function.

What the evidence actually says

The question is not whether AI can be useful. It can be, if people remain accountable within the process. A study published in the Quarterly Journal of Economics in 2025, involving 5,172 customer-support agents at a Fortune 500 provider of business-process software, observed 15% more successfully resolved enquiries or chats per hour after staff gained access to a GPT-3-based response assistant. The employees remained responsible for the conversation and could change or ignore suggestions. This is evidence of an opportunity for human-accountable assistance, not proof of automatic cost savings or of general transferability to other organisations. The effect also varied by experience and capability. The staggered introduction of an assistant in one firm is not an experiment in autonomous action. 1

The boundary matters just as much. In a preregistered randomised experiment with 758 BCG consultants, published online in 2026 and conducted with GPT-4 as available in June 2023, the probability of a correct solution among the AI-assisted groups for a selected complex management task outside the identified GPT-4 capability boundary fell by around 19 percentage points compared with the control group. This is not a general error rate and not a judgement on all current models or business decisions. It is a precise indication that, even with capable technology, permissible automation depends on the specific task and its tested boundary. 2

These findings do not contradict one another. They concern different tasks and systems, but illuminate two sides of the same leadership question. Assistance can improve performance. Outside a recognised capability boundary, a persuasive-looking suggestion can reduce decision quality. An organisation must therefore not infer autonomous accountability from a successful demonstration.

The NIST AI Risk Management Framework offers a voluntary framework for orientation. It is neither a binding Swiss or EU legal requirement nor a certification. NIST stresses documented roles, leadership accountability for AI risk decisions, differentiated human oversight, testing in the intended operating environment, monitoring and safe options to modify or stop. These are precisely the elements that turn an abstract call for control into a testable operating decision. 3

Four control criteria before any further automation

Before an organisation moves a task from suggestion to rules-based execution or from there to autonomous decision-making, I would require four questions to be answered in writing. Not as governance theatre, but as the approval basis for the accountable owner.

Does someone own the decision and its consequences?

Every outcome needs a named person or function that can stand behind the decision. This responsibility cannot be delegated to a model. If no one can say who corrects an erroneous exception, informs a customer or assesses a loss event, the automation boundary has been set incorrectly.

The criterion is particularly stringent when a decision is difficult to reverse. A flawed draft can be corrected. An unjustly rejected legitimate complaint or a mishandled personnel interaction can damage trust before a team intervenes.

Does the task contain an uncodified value judgement?

Rules can represent clear conditions. They cannot automatically decide every trade-off. Discretion versus equal treatment, short-term margin versus the customer relationship, speed versus safety or formal rule versus a legitimate special interest require conscious weighting.

The organisation should therefore not ask whether a model can formulate a rationale. It should ask whether the underlying trade-off exists as a stable, approved rule. If it does not, the decision remains with a qualified person. The model may prepare and make alternatives visible.

Can the control genuinely disprove the suggestion?

A control must be able to do more than agree. The reviewer needs access to the relevant source data, the applicable rules and the information that the case requires outside the normal range. They must be able to reject, amend, stop and escalate a suggestion without KPI pressure.

In practice, that means documenting more than the final recommendation. The basis for the decision, the context used, the exception and the correction must also be visible. Where independent review is not possible, automation must not be legitimised by a formal approval step.

Is the boundary tested and is the fallback operationally ready?

A permissible boundary is not an assumption made at project launch. It is tested for the intended operating environment. Which cases may the system handle? What data quality is assumed? At which signal does execution stop? Who takes over then, within what time and with what information?

The fallback process is not a technical emergency exit for a presentation. It is part of performance. If a team does not know how to take over a case correctly after a stop, automation shifts risk instead of managing it. Monitoring matters just as much: new products, changed policies, different customer groups or changing data can shift the tested boundary.

A decision table for specific cases

The table does not replace risk analysis. It does, however, force an organisation not to treat a task as a monolithic process.

Illustrative situationAppropriate assistancePossible bounded executionWhat is not delegated to the modelEvidence of control
Customer contract with standard componentsExtract clauses, flag deviations, prepare a draftTransfer data into approved templatesAcceptance of non-standard liability, pricing or risk provisionsAccountable person reviews the original contract, deviation and basis for approval
Exception in a customer processSearch the policy, organise case information, set out optionsRoute clear standard cases under a documented ruleWeighing discretion, precedent and commercial consequenceRejection, amendment and escalation are possible and traceable
Sensitive personnel conversationStructure topics, make policies findableComplete scheduling and documentation steps after approvalAssessment of the person, conduct of the conversation and decision on consequencesResponsible manager decides with the full context

The central test is not whether a case appears technically automatable. It is this: would the responsible person still stand behind the same decision if they later had to explain the entire file, the exception and the consequences? If the answer is no, the task needs assistance or a narrower rules boundary, not autonomy.

A realistic route in three phases

Days 1 to 30: Make one material decision visible

Do not begin with an organisation-wide automation programme. First, I would choose one frequent, commercially material decision for which quality and exception cases are visible. An owner is tasked with breaking the flow down into individual tasks: inputs, rule checking, suggestion, decision, communication, correction and fallback.

For each task, it is determined whether it will be assisted, executed by rule or not made autonomous. At the same time, a manual fallback route and a simple baseline are established: processing time, quality review, review effort, corrections and cases in fallback. These are not savings commitments. They are the measurement basis on which a later decision can be made.

Days 31 to 60: Build and test the controllable boundary

In the next phase, the organisation tests not only the system but also the control. The owner defines the permitted operating environment, data prerequisites, exceptions and stop mechanism. Reviewers examine sample cases using the source data, rather than relying solely on the model’s reasoning. They must be able to show that they can identify, amend and escalate an incorrect suggestion.

The decision paper must therefore include more than accuracy or cycle times. It also includes the time required for review, the quality of the final decision, use of the fallback and the cases in which the boundary had to be narrowed. Without this evidence, expansion is not scaling. It is an assumption.

Days 61 to 90: Own bounded operation, then decide

The clearly defined operating mode can now run in a limited area. The owner reviews regularly whether new case types, data changes or operational workarounds are emerging. Notable cases are not only corrected; they are assessed as signals of a gap in rules, data or process.

At the end of this phase comes a specific management decision: hold the boundary, narrow it, expand it in a controlled way or return to assistance. Expansion is justified only when quality, review effort and the fallback process are jointly robust. Faster processing on its own is not enough.

Where this decision affects several processes, accountabilities and value assumptions, an Executive AI Transformation Blueprint can provide the required decision architecture: a Management Value Case, a standalone two-page Executive Summary, an Executive Deck, prioritised workstreams and a roadmap. The point is not to introduce as much AI as possible. The point is to decide robustly what to stop, build, test and scale.

The boundary is a leadership responsibility

Organisations do not have to choose between full autonomy and complete abstention. Many valuable applications sit in assistance and clearly bounded, rules-based execution. There, technology can make work easier without hollowing out accountability.

So what should never be automated is not every individual action that appears difficult today. What an organisation should never outsource is its duty to connect a consequential decision with a value judgement, accept responsibility and be able to intervene in the specific case. Better technology does not make that duty smaller. It needs to be designed more precisely.

FAQ

Does this mean AI must not make decisions?

No. Clear, tested and reversibly executable decisions can be automated within a documented rules boundary. The more exceptions, trade-offs and hard-to-reverse consequences a task contains, the more AI should assist rather than decide autonomously. The boundary is set for each task and operating environment, not broadly for an entire job profile.

Must the executive team review every AI suggestion personally?

No. Control should sit where subject expertise, decision rights and proximity to the case come together. The executive team remains accountable for the risk boundary and for the appropriate organisation of oversight. The review itself can sit with qualified roles. But an approval process without time, access to data and the right to disagree is not a robust delegation.

How can value be measured without claiming a saving?

With a baseline and a complete measurement logic. Alongside processing time, this includes the quality of the final decision, the effort required for review and correction, the frequency of fallback and robust indications of side effects. Only when these measures are viewed together can an organisation decide whether automation creates value or merely shifts work and risk.

Is the NIST AI RMF a legal requirement or certification?

No. The NIST AI Risk Management Framework is a voluntary risk framework. It helps structure roles, testing, monitoring and intervention options. It does not replace an assessment of applicable law, nor does it automatically confirm the lawfulness or quality of a specific system. 3

Sources

Related Insights

Strategic Advisory

From insight to a decision you can stand behind.

We translate AI potential into clear architecture, measurable priorities and an executable roadmap for your organization.