Shadow AI in the Enterprise: A Governance Framework for Transitioning from Uncontrolled Experimentation to Secure, Accountable AI Adoption
The paper presents a ten-principle governance model, a risk-tiering structure, an agent-identity control baseline, and a four-phase implementation roadmap, concluding that prohibition-based strategies are largely ineffective and that visibility, safe enablement, and embedded controls produce more durable risk reduction...