GenAI Governance Triage

The priomised outcomes:

1. AI/GenAI Use‑Case Register v0.1 (10–15 Use Cases. Up to 20–40 Use Case if the the client had the opportunity to follow the pre-workshop guidcelines). Will cover  owner, purpose, tool/vendor, data sensitivity, where used, current controls, risk rating placeholder, links to evidence

2. Top 5 use cases “triaged” (simple risk flags + what to do next)

3. One completed “Threshold Assessment” for a real use case (or draft if approvals are slow)

4. One-page staff “Do / Don’t” sheet (privacy + recordkeeping + safe prompting behaviours)

5. 30‑day action plan with owners and deadlines (this is what management loves)

Agenda (simple, credible)

• 09:00–10:30 Exec + governance sponsor interview (what’s happening, what keeps them awake)

• 10:30–12:30 Rapid inventory workshop (who uses what; for what; with what data)

• 13:15–15:00 Build register live (screen shared; they watch it become real)

• 15:00–16:00 Run one threshold assessment live (choose the “most used” case)

• 16:00–17:00 Training burst + 30‑day plan + “what good looks like” next