List AI systems and assistants already in use
Record the products, owners, user groups, data classes, and current business purpose for each AI-enabled workflow or tool.
This route no longer describes a 30-day launch plan. It now sequences the evidence work a delivery team can do before making public readiness, disclosure, or deployment claims.
Start with factual context before recommendations. The first week should establish what is deployed, who owns it, what data is in scope, and where public claims need supporting evidence.
Record the products, owners, user groups, data classes, and current business purpose for each AI-enabled workflow or tool.
Use the retained discovery scripts to collect licence, Copilot, security, sharing, Purview, and automation-readiness evidence.
DisclosureMark where an organisation cannot yet explain AI use, data use, human review, or escalation in plain English.
Document handoffs, systems, approvals, exceptions, manual checks, and output review before any AI-assisted future state is proposed.
StakeholdersSpeak with system owners, IT, operations, compliance, and representative users so evidence is not based on assumptions.
Ask for AI acceptable-use rules, data classifications, incident logs, vendor records, approval paths, and existing audit findings.
Compare current and proposed AI-assisted workflows against PSF controls, then record where human review, logging, access, or escalation must change.
ValueTie value claims to baseline effort, confidence, control dependencies, and owner sign-off rather than presenting a public price or revenue promise.
AgentsFor agents that can call tools or trigger workflow actions, capture owner, action limits, telemetry, rollback, and incident response evidence.
Summarise what was inspected, which facts are supported, which gaps remain, and what should not yet be claimed publicly.
CommsUse the communication kit to request missing evidence, explain the review, and follow up without hype.
RecordRoute the final summary to a disclosure, benchmark, product record, incident note, or future graph record rather than a commercial landing page.
The goal is a public-ready summary of what is known, what is supported, what remains uncertain, and which controls need attention before production AI expands.