Building AI Governance from Scratch: NIST AI RMF, Shadow AI, and Board Reporting

78% of organizations now use AI in at least one business function, but most haven't gone beyond putting a basic AI policy in place. In this workshop, Rivial Data Security founder Randy Lindberg and senior consultant Molly Ford walk through a practical approach to AI governance using the NIST AI Risk Management Framework. Topics include why AI risk belongs inside your existing cyber risk program instead of a separate silo, the eight elements you need to properly measure AI risk, how to catalog AI systems when tools like Copilot and Gemini are already embedded in your environment, how to combat shadow AI through smarter procurement and change management, reporting AI risk to the board using quantitative framing instead of heat maps, and the key differences between the NIST AI RMF and the Financial Services AI RMF. Whether you're just getting started or looking to mature your program, this session gives you a realistic first step.