playbooks/infosec/shadow-ai-advisory-template

Shadow-AI Advisory Template

A one-page advisory the IT / InfoSec team can issue when an unapproved AI tool surfaces in staff usage — what to stop, what to keep, what to escalate.

shadow-ai-advisory-template.mdTemplate · 5 min

Contents

  1. 01What this advisory addresses

For: IT / InfoSec teams responding to shadow-AI discovery

PlaybooksIT / InfoSecTemplate

01

What this advisory addresses

This template is structured. The working copy is being finalized by our subject-matter editors — directionally accurate today, refined shortly.

  • What was discovered — tool name, where it surfaced, what data may have been exposed.
  • Stop-the-bleeding actions — what staff should immediately stop doing while review is in progress.
  • Keep-doing actions — what equivalent approved workflow exists today.
  • Escalation path — who in IT and Compliance needs to be looped in, and on what timeline.

IT / InfoSec Playbook

Practice this in the course.

The AiBI-Foundation course walks through the same prompts, with reviewed work you can take to your team.

Shadow-AI Advisory Template — IT / InfoSec Playbook — The AI Banking Institute