AI Enablement playbook/Module 5 · Shadow AI & security

Day 44 / 100 · Shadow AI & security · Accounts and access

Company accounts. MFA. Clean exits.

The simplest security wins in AI are the same as everywhere else: who owns the account, how it's protected, and what happens when someone leaves.

Set it up right

On Day One

  • Business accounts owned by the company
  • Single sign-on where the tool supports it
  • Multi-factor authentication switched on
  • Access by role, not by request

Close it down right

On The Last Day

  • AI accounts on the offboarding checklist
  • Shared chats and links revoked
  • API keys and connectors removed
  • Chat history kept or deleted by policy

Own the account, own the data.