A company has dozens of AI pilots, but no inventory of their owners, data sources, users, or risk levels. What governance improvement should come first?

1. Create an accountable AI inventory and a risk-based review process.
2. Ban all documentation to accelerate adoption.
3. Approve all pilots permanently because they started as experiments.
4. Count only the number of model subscriptions.