• Use of artificial intelligence is governed by an AI governance and acceptable-use policy, with organizational guidance covering acceptable use and the handling of sensitive data.
• Generative-AI access is provided through a managed enterprise account, and any new AI tool or product is evaluated and approved by a dedicated committee before adoption.
• A structured AI enablement program provides user awareness, training, use-case evaluation, and formal instruction on appropriate and effective use of generative-AI tools.

Framework Alignment: NIST CSF GV.PO; NIST AI RMF (Govern, Manage); GDPR Art. 5, 32; ISO 27001:2022 A.5.10