The audit starts with a list you do not have

Robbie Tyrie of Torridon Cyber says half his work is now AI governance reviews. His first tip: start with the asset register and mark every tool that uses AI.