01 / Discover
Create a reliable picture of AI use across departments and suppliers.
- Catalogue systems and use cases
- Name accountable owners
- Record the context of use
02 / Assess
Evaluate potential effects and decide which controls are proportionate.
- Review operational and human impacts
- Consider data and security dependencies
- Document assumptions
03 / Decide
Make approval and escalation pathways clear to teams.
- Assign decision rights
- Capture exceptions
- Create change gates
04 / Monitor
Revisit decisions as models, use cases and risks change.
- Track performance and incidents
- Schedule reviews
- Update evidence