AI is already running inside your business and your clients' businesses. The question is whether anyone can prove how it is controlled. Answer 15 questions and see where your governance holds and where it breaks.
You have a written AI acceptable use policy.
It names approved tools, prohibited uses, and what happens when someone uses an unapproved one.
Pick the answer that is true today, not the one you are working toward.