End‑to‑End Assessment + Evidence Pack

Output of the Workshop

1. AI/GenAI Use‑Case Register v0.1 (20–40 entries if they’re prepared; 10–15 if not): owner, purpose, tool/vendor, data sensitivity, where used, current controls, risk rating placeholder, links to evidence

2. Top 5 use cases “triaged” (simple risk flags + what to do next)

3. One completed “Threshold Assessment” for a real use case (or draft if approvals are slow)

4. One-page staff “Do / Don’t” sheet (privacy + recordkeeping + safe prompting behaviours)

5. 30‑day action plan with owners and deadlines (this is what management loves)

6. End‑to‑end Impact Assessment for one priority use case (not just threshold)

7. Evidence Pack structure (folders, naming, required artefacts, versioning)

8. Draft governance workflow (who approves what; revalidation triggers; cadence)

9. Two training sessions: one for practitioners, one for managers/approvers

1-day option

If GenAI Governance Triage has been conducted prior.