1. Phase 1: Discovery
Discover which AI tools are already in use across the company. Map the data flows and identify high-risk usage patterns.
2. Phase 2: Policy Definition
Establish a clear, enforceable AI usage policy that defines approved models, data handling rules, and approval requirements.



