Decide where AI earns its place before deciding which tools to buy.

Establish, per entity and per AI system, whether the organisation uses AI built by others, provides it, or produces it, because obligations attach to the role.

Map operational areas and score candidate use cases on value, information sensitivity and decision impact.

Help the executive team fix how far the organisation is willing to rely on AI output, and where a human must decide.

Examine the contractual and data-handling terms of AI services against what the organisation needs to enforce.