Free Lesson
The First 90 Days: A Minimum Viable AI Governance Program
Part of The AI GRC Summit 2026: Governing AI in the Age of Agents
30 min
Nov 21, 2026 3:00 PM
By continuing, you agree to Maven's Terms and Privacy Policy.
What you'll learn
Define what minimum viable governance means
Separate what your program must have by day 90 from what can wait, so you start small and stay credible.
Days 1-30: See what AI and agents you have
Build an inventory, surface shadow AI, name owners and publish an acceptable-use policy people will follow.
Days 31-60: Set the rules and review what matters
Tier risk, review your riskiest models, agents and vendors, and set authority limits and human approval points.
Days 61-90: Prove your controls work
Collect evidence, monitor live systems and report a few metrics that map to ISO 42001 and NIST AI RMF.
Leave with a 90-day plan for your leadership
Fill in the plan template with what you learned at the summit and know what to do first on Monday.
Why this topic matters
A day of good sessions is easy to forget by Monday. AI governance efforts often stall when teams try to build everything at once or wait for the perfect framework. This closing session of The AI GRC Summit 2026 turns what you learned into a 90-day plan: what to do first, what to defer and what evidence to show leadership. You leave with a template you can fill in and start on right away. No coding required.
