AI use & review overview
Shadow AI Risk Kit · Fictional working example
- 3
- AI uses recorded
- 2
- Coverage records
- 3
- Risks to review
- 3
- Open actions
Disclosed AI uses
3 recorded| Tool / team | Purpose | Recorded status | Owner |
|---|---|---|---|
| SupportDraft · Service desk | Draft internal support articles from public vendor documentation | Restrict | Service delivery manager |
| TicketNote · Service desk | Summarize customer support tickets | Escalate | Service delivery manager |
| CodeDraft · Engineering | Suggest internal scripts using synthetic test cases | Restrict | Service delivery manager |
Recorded decisions apply only to their stated scope. Review supporting evidence before relying on them.
Next actions
3 openA sample troubleshooting instruction has not been tested. Service delivery manager checks technical steps and removes customer identifiersService delivery manager
Ticket-field redaction and customer permission remain unverified. Customer owner and security lead confirm permitted fields and processin…Service delivery manager
Two contractors have not confirmed tools or connector permissions. Engineer tests changes in an isolated environment; customer execution…Service delivery manager
Scope & conditions
SupportDraft
Public documentation and synthetic support tickets
TicketNote
None pending permission review