Every week I meet two kinds of organizations. The first has banned AI until further notice. The second has no policy at all, which means every employee is making their own. Both are making the same mistake. Treating governance and adoption as opposites.
Governance-first adoption is neither slow nor timid. It is a sequence, and organizations that follow it move faster than either the banners or the free-for-alls, because they never have to stop and clean up.
Step one. Write the one-page policy before the first official tool, and draft it from the amnesty inventory in step two instead of from a template. What data may never be entered into external systems. Who approves new AI uses. What must be reviewed by a human before it goes out the door. One page, plain language, signed by leadership.
Step two. Inventory what is already happening. In nearly every organization, staff are already using AI informally. Ask without threatening. You cannot govern what you refuse to see, and the informal uses will show you where the real demand is.
Step three. Pick one process, not one tool. Choose a workflow with real friction, measurable volume, and low catastrophic risk. Reporting, first-draft communications, data cleanup, meeting summaries. Rebuild it deliberately, measure before and after, and publish the result internally.
Step four. Assign accountability by name. Every automated process has a human owner who answers for its output. AI can do the work. It cannot take the responsibility.
Step five. Report to the board. AI use is now a governance matter. A short quarterly summary, what we use, what it touches, what went wrong, what we changed, protects the organization and educates the directors.
Recklessness is not using AI. Recklessness is using it without knowing you are, which is the current default almost everywhere.
Related reading
Mel Meier, DBA is an applied social scientist and the founder of iB Consulting USA, a woman owned, WOSB certified advisory firm. She serves boards, associations, and executive teams through board advisory, organizational diagnostics, speaking engagements in the United States and internationally, and organizational assessments.