If your board asked this afternoon for a list of every place AI is used in your firm, which tools, which desks, who owns each one by name, does that list exist?
A question for anyone running a regulated firm. If your board asked this afternoon for a list of every place AI is used in your firm, which tools, which desks, who approved each one, who owns each one by name, does that list exist?
Not the policy document. The inventory.
You cannot supervise what you have not inventoried, and you cannot assign ownership to uses you do not know exist.
Most firms skip the list because it feels administrative and the first draft is embarrassing. It is also the cheapest control you will ever build, and the one every other control stands on.
Inventory is the first act of governance.