THE STARTING POINT
Three things to get right.
- Document each AI use case, data source, owner, and intended action.
- Record risk decisions with reviewers and review dates.
- Keep evidence of how a control operates, not just that it exists.
TRY THIS WITH YOUR CUSTOMER
A question worth testing.
Customer objective: turn an AI use case into a reviewable governance record. Build a one-page inventory naming the owner, data sources, approved audience, allowed actions, evaluation criteria, and review date.
Browse the lab notesGive the customer a useful takeaway.
Start with a customer question and a clear success criterion. Capture the baseline, observed behavior, and evidence, then explain what the result means and which question to investigate next.