AI Governance for Directors: Oversight, Risk and Assurance