01
Render a tool verdict
Document the data classes, controls, and approval status for a candidate AI tool.
ArtifactTool verdict packet
IT / InfoSec Playbook
Decide which tools, which data, and which people — defensibly.
Classify data, vet tools, document the verdict, and keep the NPI boundary visible.
Playbook Snapshot
IT / InfoSec Enablement Map
Primary Goal
Defensible verdict
Core Artifact
Tool verdict log
Risk Focus
NPI + access
Data classification clarity
56/100
Allowed-tool catalog
62/100
Shadow-AI visibility
38/100
Identity + access governance
70/100
Illustrative preview; your assessment personalizes the scores.
Recommended path
Maturity Assessment → Foundation Course → Data Classification → Sandbox
Role path
One playbook. Four working views.
Scan the role map first, then open the view you need.
Use-case map
Where IT / InfoSec can use AiBI immediately.
Each row pairs the work, the risk, and the artifact to keep.
HIGH risk
02
Run a data-classification check
Map a workflow to the data classes touched and surface NPI exposure points.
ArtifactData class map
03
Draft a shadow-AI advisory
Brief the business on which tools to stop using and what is approved instead.
ArtifactShadow-AI advisory
04
Build an access-review checklist
Document who can access an approved AI tool, with what data, under what review.
ArtifactAccess review checklist
IT / InfoSec Playbook
Be the team the business asks first — not the team they bypass.
Clear verdicts, publishable advisories, and a catalog that actually answers the question. That is the difference between InfoSec as gatekeeper and InfoSec as enabler.