From alvarezandmarsal.com: Organisations must identify and document their current and planned AI systems to ensure proper governance and compliance.

This involves leveraging existing IT and privacy inventories, collaborating across teams, and focusing on critical systems and high-risk areas.