Your AI policy
Approved tools, rules for sensitive data, human review of AI work, and staff training with sign-off.
- Home
- AI Services
- AI Policy & Governance
Use AI with confidence
We write the rules your team follows, check your AI provider’s contract, find the AI tools already in use, and put controls in place to protect your data.
- A written AI policy your team signs
- AI provider contract review
- Technical controls on your data
Your team may already be using AI on its own
Your Hawaii team is growing, and some of your people may already be trying AI tools on their own.
Every AI tool used without clear rules can put client data, health information or confidential documents at risk.
How do you set clear rules for AI and back them up?
AI policy and governance gives your business clear rules for AI and the controls to back them up.
- A policy that names the AI tools staff may use and what they may use them for
- Clear rules for client data, health information, financial data and confidential documents
- When a person must review AI work before it goes out
- Training on the policy, with everyone signing off
It comes with every AI Adoption & Training engagement, and it’s part of IT Hawaii’s cybersecurity programs.
Rules, contracts and controls behind them
We write your rules, check your contracts and put controls behind them, so your team can use AI with confidence.
Provider contract review
We check an AI provider’s terms on data use, retention and training AI on your data before you sign, and choose the plan that fits your industry.
Finding unapproved AI
We find the AI tools your staff already use, so you can approve the good ones and replace the risky ones.
Technical controls
We block unapproved AI tools and label sensitive data, for example with Microsoft Purview, so your policy is enforced as well as written.
AI tools and the rules around them change fast
We review your AI governance regularly, so your policy, approved tools and controls stay current.
- Part of your NIST CSF 2.0 cybersecurity program, where AI falls under the Govern function
- Reviewed in your fractional CISO reviews with IT Hawaii
Questions we hear a lot
What is AI governance?
AI governance is how a business decides which AI tools to use, what data can go into them, and who checks the results. ITHawaii.AI puts it in place with a written AI policy, AI provider contract reviews, discovery of unapproved AI tools, technical controls and regular reviews.
What does an AI policy include?
Our AI policy lists approved AI tools, sets rules for client data, health information, financial data and confidential documents, says when a person must review AI work, and includes staff training with sign-off.
What is shadow AI?
Shadow AI is any AI tool staff use without the business approving it. We find the AI tools already in use, so you can approve the good ones and replace the risky ones.
Will AI providers use our data?
It depends on the provider’s contract and plan. We review data-use, retention and training terms before you sign and choose a plan whose terms fit your industry.
How does AI governance fit with cybersecurity?
AI governance is part of a NIST CSF 2.0 cybersecurity program, under the Govern function. IT Hawaii reviews it in your fractional CISO reviews, so your policy and controls stay current.
How do we get AI policy and governance?
It comes with every AI Adoption & Training engagement and with IT Hawaii’s cybersecurity programs, which are offered statewide.
Ready to put AI rules in place?
Tell us where AI is showing up in your business, and we'll show you how to make it safe.
A real person will reach out within one business day.