Give employees a clear path to use AI responsibly.

Keep an inventory of AI tools, track who owns them, and manage requests for new ones. Document what data each tool can handle, review vendor risks, and revisit approvals as use changes.