Prepared for Ring Energy, Inc.
We ran the search your next investor, insurer or major customer is going to run. This is what came back.
Motion Consulting Group · a Kelly Services company · July 2026
Do not narrate the cover. Let them look at their own logo for a beat, then say the one line: we ran the search your next investor is going to run. Then move.
This measures what is publicly findable — not what exists inside the company. "Not found" means an outsider could not locate it, which is exactly where an investor or insurer stands.
Say plainly that this measures what is PUBLICLY FINDABLE, not what they do internally. If the IT director says 'we have that, it is just not published' — that is the win. Write it down and move on warmly. Do not defend the finding.
The most useful finding is not an absence. It is that Ring's cybersecurity governance is genuinely well constructed — NIST-based, a named director with the credentials to hold it, a standing management committee, board oversight through Audit, outside assessors engaged.
That is the same apparatus AI governance requires. The framework simply has not been extended to it yet — and on that point, the sector is wide open. We could not find a published AI governance policy at any oil and gas company, majors included.
A Russell 3000 constituent since June, with rising institutional visibility, whose filings do not yet address a category their other holdings have started disclosing.
Excellent cyber posture, clearly documented. No documented answer yet on AI — increasingly a separate question at renewal.
A vendor with a strong security answer and no AI answer, at a moment when both questions are starting to appear on the same form.
This is the slide that decides the meeting. Lead with the compliment and mean it: their cyber governance is genuinely well built. NIST, a named director, a standing committee, board oversight. Then the turn: that is the same apparatus AI needs, and nobody in the industry has extended it yet.
Named operators, measured outcomes. Included because it is useful to you whether or not we ever work together.
No ask on this slide. Devon is the closest analogue — Delaware Basin, artificial lift, first-party numbers from an earnings call. Chord is rod lift, which is their equipment. If they only take one thing from the meeting, let it be this slide.
Not a transformation programme — the same shape as the cyber work already in place, extended one category across.
Where AI is already in use — in your systems, and in your vendors' systems operating on your data. Most companies find more than they expected.
One document: what is permitted, what requires review, who signs. Modelled on the cybersecurity programme you already run.
The answer to the question, in the form the Audit Committee already receives cyber reporting.
The unusual part: we searched for a published AI governance policy at every major in this industry and did not find one. A one-page position, adopted now, would put Ring ahead of operators many times its size — not by spending more, but by writing it down first.
Twenty minutes is enough to know whether this is worth anything to you. Richard Taubin · Motion Consulting Group, a Kelly Services company.
How we verified all of this → — every source, the method, and what we could not confirm.
Not a programme, not a proposal. Land the first-mover point: no major in this industry has published an AI policy, so a one-page position puts them ahead of companies many times their size. Then stop talking.