Phase 1: Explore
Write a two-part AI policy
Pair clear red lines with a vision for good use.
Part one names prohibited uses, such as putting client information into public tools, and explains why. Many public tools keep what users type, so a shortcut can become a data leak. Part two describes what success with AI looks like, tied to your mission.
At the team level, this can be a one-page charter. At the organization level, HR, IT, and Legal should vet it. Review both parts every three to six months for the first year or two.
Put it to work
- Use the front-page test: would you be comfortable seeing this use in the news?
- Explain the reason behind each rule. People route around rules they don't understand.
- Share the policy widely and invite input from all levels.