Use this framework to:
- Scope – Identify which types of shadow AI are plausible and have the most impact in your environment.
- Detect – Determine the level of detection you will invest in to identify these agents.
- Triage – Direct effort where it is warranted and document where risk has been accepted.