When I review an AI deployment, I rarely start with the model. I start with the identity using it. Who created it? What can it access? What decisions can it make? Where does the data go? Can we see what it did after the fact? These are basic security questions, but they are where control is often lost. Most companies already have more AI than their official inventory shows. Employees use tools...