Review it like software: often.
AI tools change every few months. A policy written once and filed away drifts out of date without anyone noticing.
When to review
Triggers
- Every six months, on the calendar
- A new tool or major AI feature arrives
- After any incident or near miss
- New laws or regulator guidance
- A new High-tier use is proposed
What to check
The Review
- Is the inventory still accurate?
- Are approvals quick enough?
- What went wrong, or nearly did?
- What do staff keep asking about?
Small updates, often.