A policy that bans AI only changes where people use it. What actually differs between a personal account and an enterprise one, the four decisions a leadership team owns, and the one-page policy that holds.
The renewal questionnaire is the most honest read on your security program most companies get all year. What it is really asking, where the cost lands, and what to close in the ninety days before it arrives.
Security leaders and boards usually talk past one another, and more information is not the fix. What belongs in a board security update, what can safely be left out, and why the difference matters.