Skip to content

Field guide

Run a data check before an AI pilot

Know what information the workflow touches before connecting a tool.

Classify the input

Separate public, internal, confidential, regulated, customer, employee, and financial information. If the team cannot classify the input, the pilot is not ready for real data.

Trace the path

Record where prompts, files, outputs, logs, connectors, and backups may go. Review the purchased plan rather than assuming consumer and business controls match.

Keep a human control

Assign an owner, review step, correction path, and shutdown method. NIST frames AI risk work around governing, mapping, measuring, and managing risk. A small pilot can use the same pattern without heavy process.