For most community banks the decision to "not do AI" is no longer available, because it is already present through vendor-embedded features, employee shadow use, and decisioning models. The real question is whether the institution is governing what is already in the building.

This lab walks the three doors AI enters through, shows leaders how to build visibility from logs and vendor disclosures they already have, and provides a lightweight, examiner-ready way to assess a use case across six risk domains and reach an approve, limit, pilot, or defer decision.

Learning Objectives:

• Learn the three ways AI enters the institution (vendor-embedded, employee shadow use, and decisioning) and explain why unmanaged visibility equals unmanaged risk.
• Apply a repeatable, risk-based AI assessment across six domains and produce a one-page decision record an examiner would accept. 
• Assign clear ownership across business, IT, security, and risk so AI decisions are governed rather than defaulted.