After ChatGPT, Start With the Work
Article graphic
Policy, risk, review, and record moving through a governance loop
Flat IAG governance review loop diagram for After ChatGPT, Start With the Work.
The period around January 2023 gave leadership teams another clear signal that generative AI was becoming an operating issue, not a side experiment. ChatGPT's late-2022 release created immediate executive attention, while Azure OpenAI general availability and the NIST AI RMF 1.0 launch gave January 2023 a practical enterprise frame: capability access was expanding, and risk-management expectations were becoming more concrete.
For executives, the important question was not whether the technology looked impressive. The useful question was how the new capability would enter real work, which controls would need to be present, and what evidence would show that the organization was getting durable value rather than temporary attention.
The Operating Signal
Leaders are feeling pressure to "do AI" quickly, but the pressure is arriving before most teams have identified which workflows actually need help, which data boundaries matter, and where draft-quality output is useful enough to test.
That problem is familiar from every major technology cycle. The internet, ecommerce, telecom, mobile, cloud, and social media all created value only after organizations built the operating muscle around them: governance, architecture, adoption, measurement, vendor management, security, and clear accountability. AI follows the same pattern. It may move faster, but it does not remove the need for management discipline.
Operating implication: The first enterprise response to generative AI should be a focused operating assessment, not a broad rollout. Treat the new capability as something to map against real knowledge work, risk boundaries, and decision checkpoints before turning it into a program.
What Leaders Should Manage
The first management move is to separate a capability from an operating model. A model release, vendor announcement, benchmark, or platform feature can create opportunity. It does not, by itself, define the workflow, the owner, the data boundary, the review step, or the success metric. Those choices still belong to the enterprise.
Practical Frame
For this topic, the practical leadership frame is:
- Name the leadership pressure after ChatGPT without amplifying hype.
- Separate tool curiosity from workflow-level operating need.
- Identify the first capability inventory: high-friction knowledge work, data sensitivity, draft/review patterns, and decision points.
- Define the governance checkpoint before pilots: acceptable data, accountable users, review expectations, and success criteria.
- Close with a small operating assessment rather than a rollout mandate.
This keeps the conversation grounded. Instead of asking a team to "use AI," leaders can ask which part of the work is being changed, what information the system is allowed to use, who reviews the output, and how the result will be measured. That is where the value conversation becomes specific enough to manage.
The Review Standard
AI work needs a review standard before it needs a larger rollout. The standard does not have to be heavy, but it should be explicit. A useful review asks whether the workflow is bounded, whether the data is appropriate, whether the output can be checked, whether exceptions have a path, and whether an accountable person owns the decision.
Leadership question: Which three workflows would become meaningfully better if draft, summary, or classification work became faster, and which of those can be tested without exposing sensitive data?
That question should be answered before scale. If the answer is unclear, the organization may still be ready for exploration, but it is not ready to treat the workflow as production capability.
A Practical Starting Point
First Move
Run a one-week AI opportunity scan across a leadership team: list repeated knowledge-work bottlenecks, mark data sensitivity, identify review owners, and choose one low-risk experiment.
The output of that step should be a small operating artifact: a workflow map, a use-case brief, a control checklist, a vendor-review note, or a decision record. The artifact matters because it gives leaders something to inspect. It also gives cross-functional teams a shared language for what is being tested and what is not yet approved.
What This Means For IAG Work
IAG's advisory posture for this article is deliberately practical. Invite leaders to begin with a disciplined workflow map and a governance conversation before choosing tools or announcing an AI initiative. The goal is not to slow useful adoption. It is to make adoption legible enough that leaders can fund, govern, and scale it with confidence.
The broader theme is steady: AI value is realized through disciplined work design. Better models help. Stronger platforms help. Regulation and standards help. But the enterprise still has to decide which workflows matter, where trust is earned, and how the organization will know when AI assistance is producing reliable business results.
Source Note
The 3 sources linked below ground the timing and context for this article. They should be treated as source material for leadership interpretation, not as proof that any single vendor path or policy response is the right answer for every organization.
Mentioned Concepts
- AI operating modelThe repeatable management system for selecting AI use cases, assigning owners, governing risk, evaluating outputs, and moving work from experiment to production.
- risk tieringA way to classify AI use cases by business impact, data sensitivity, regulatory exposure, user population, and required oversight.
- human reviewA deliberate point where an accountable person checks context, risk, quality, or next action before AI-assisted work is accepted or acted on.
- workflow governanceThe practice of governing AI at the level of real work: inputs, tools, decisions, owners, metrics, exceptions, and review loops.