An AI risk baseline covering tool inventory, approval workflow, data classification, human oversight, and Shadow AI exposure.