Unapproved by Default: A Working Governance Model for Staff AI Use in UK Organisations
Most UK organisations already have more AI tools in use than they have approved. This playbook sets out how to find unsanctioned use, grade the data exposure it creates, and write rules that staff will actually follow — without turning governance into a paperwork exercise that nobody reads.