Introduction

You will learn to build sustainable habits and routines for responsible AI use--so that verification, documentation, and escalation become automatic, not something you have to think about each time.

At the Assisted Use level, you are moving from understanding concepts to applying them with guidance. You will begin using AI tools under supervision, learning to evaluate their outputs critically and document your verification processes. This is where theory meets practice -- with appropriate guardrails in place.

This lesson is designed to be accessible to professionals at all experience levels while providing the depth needed for practical application. Whether you are encountering these concepts for the first time or building on existing knowledge, the material ahead will strengthen your ability to navigate AI governance challenges with confidence and competence.

Core Concepts

Anti-Patterns / Misuse Risks

Anti-Pattern 1: One-Time Compliance "I'll be careful with this AI use, and then I can relax the standards going forward."

Risk: You can't maintain different standards for different projects. Habits are about consistency.

Safeguard: Apply the same standards to every use. Make them automatic.

Anti-Pattern 2: No Accountability "I follow good practices myself, but I don't remind others or hold the team accountable."

Risk: Team norms drift if not actively maintained.

Safeguard: Establish team standards and gently hold each other accountable.

Anti-Pattern 3: Checklist Fatigue "I created a checklist, but after a few uses, I stopped using it because it felt tedious."

Risk: Checklists are only useful if you use them. But they're also a sign that something should become habitual.

Safeguard: Use checklists until the habit is automatic. Then reduce to spot-checks.

Anti-Pattern 4: No Learning or Refinement "I've been following my habits for months, but I haven't reviewed whether they're effective or adjusted them."

Risk: Habits can become mechanical; they may not be addressing actual risks.

Safeguard: Periodically review your practices: Are they effective? Do they need adjustment?

Anti-Pattern 5: Team Norms Aren't Enforced "Our team has standards for AI use, but some people ignore them because there's no consequence."

Risk: Norms drift if not maintained. Soon everyone is ignoring them.

Safeguard: Gently but consistently reinforce team standards. Make them non-negotiable.

Human Judgment Checkpoints

When building AI use habits, ask yourself:

• Clarity: Do I know exactly what responsible AI use looks like for my role?
• Trigger: What will remind me to apply good practices?
• Routine: Have I identified the specific steps I'll take every time?
• Automation: After practice, have these steps become automatic?
• Documentation: Am I recording my practices so they're defensible?
• Team: Are my practices aligned with team and organizational standards?
• Learning: Am I learning from experience and refining my practices?
• Sustainability: Can I maintain these practices long-term without burning out?

[Practical Tip]

As you work through these concepts, consider how each one applies to your current role. Think of a specific scenario from your recent work where this concept would have been relevant. Building these mental connections between theory and practice is the fastest way to internalize new knowledge and make it actionable in your daily responsibilities.

Traceability / Defensibility Considerations

Habit documentation supports defensibility:

What to Record: - Your personal AI use checklist or standards - Team agreements on AI use practices - Documentation from individual projects showing consistency - Reflection on whether practices are working

Why This Matters: - An auditor can see that you have a systematic approach - You can show that responsible AI use is habitual, not reactive - It demonstrates organizational maturity in AI governance

Responsible AI and Control Considerations

Building Sustainable Practices: 1. Clarity: Establish clear standards so people know what's expected 2. Consistency: Apply standards uniformly; don't make exceptions 3. Support: Provide training and resources to help people follow standards 4. Reinforcement: Celebrate people who follow standards; gently correct those who don't 5. Evolution: Periodically review and improve standards based on learning

Control Considerations: - Organizational AI use should be governed by consistent standards - Standards should be reviewed and updated periodically - Training should reinforce standards - Compliance should be monitored - Good practices should be celebrated

[Practical Tip]

As you work through these concepts, consider how each one applies to your current role. Think of a specific scenario from your recent work where this concept would have been relevant. Building these mental connections between theory and practice is the fastest way to internalize new knowledge and make it actionable in your daily responsibilities.

Practice / Reflection Prompts

• Create your personal AI use routine. Define the exact steps you'll take every time you use AI: pre-use check, during-use documentation, post-use verification. Write it down.
• Test your routine. Use it on your next three AI tasks. Refine it based on what works and what doesn't.
• Establish team standards. Discuss with your team: What should we all do when we use AI? What would be our team norms?
• Document team norms. Write them down. Share them. Use them consistently.
• Reflect quarterly. Every three months, ask: Are my AI use practices still working? Have I learned anything that should change my approach? What feedback am I getting from peers?

Practical Application

Understanding concepts in the abstract is valuable, but the real test is whether you can apply them in professional practice. This section bridges the gap between theory and application with concrete scenarios drawn from oversight work.

Use Case 1: Building a Personal AI Use Routine Every time you use AI, you follow the same steps: 1. Before use: Ask yourself if this is appropriate per policy 2. During use: Save the prompt and output 3. After use: Document the verification steps 4. Finalization: Get approval before distributing

You make this routine so automatic that you don't have to think about it each time.

Use Case 2: Building a Team Norm Your team commits to using AI for summarization, research, and drafting. Every time someone does this, they: 1. Document that AI was used (in the work product or cover memo) 2. Note verification steps taken 3. Have the work reviewed by a peer before finalizing

This becomes the team standard; people expect it and follow it automatically.

Use Case 3: Building an Organizational Approach Your organization establishes: 1. Approved AI tools for different purposes 2. Template documentation for different work types 3. Escalation pathways for different risk levels 4. Training on when to use and when to escalate

As people do their work, they follow the established approach consistently.

Detailed Examples

The following examples illustrate how the concepts from this lesson play out in real-world oversight scenarios. Each example is designed to help you recognize similar situations in your own work and respond with appropriate professional judgment.

Example 1: Personal AI Use Checklist

Your Routine - Done Every Time You Use AI:

``` PRE-AI CHECKLIST: Is this use appropriate? - Policy classification: Is this low-risk (approved), medium-risk (approval needed), or high-risk (escalate)? - Data sensitivity: Am I handling sensitive data? Does policy permit it? - Escalation: Is this situation requiring escalation? - Decision: Should I proceed with AI, or escalate/use different approach?

DURING-AI CHECKLIST: - Prompt saved: Have I saved what I asked AI to do? - Output saved: Have I saved or recorded what AI produced? - Context noted: Have I documented which AI tool and when?

POST-AI CHECKLIST: - Verification started: Have I identified key claims to verify? - Verification completed: Have I verified against sources (if required)? - Documentation: Have I documented what was verified? - Changes recorded: Have I noted any corrections or additions?

FINALIZATION CHECKLIST: - Review arranged: Has someone reviewed this work? - Approval obtained: Has appropriate authority approved this? - Transparency: Have I documented that AI was used? - Distribution ready: Is this ready to share or use?

Status: Not Started In Progress Complete ```

How This Works in Practice: You use the checklist every time you use AI. After a few repetitions, you do the steps automatically without the checklist. But the checklist stays on your desk as a reminder that certain steps are non-negotiable.

Example 2: Team AI Use Standards

Your Team's Commitment to Responsible AI Use:

``` OUR TEAM'S AI USE STANDARDS

When we use AI for summarization, research, or drafting:

• TRANSPARENCY: We document that AI was used
• - In memos/covers, we mention "With AI assistance, we..."
• - In documents, we note "Initial draft generated with AI; verified by [name]"
• VERIFICATION: We verify key facts or claims
• - For summaries: We check facts against original sources
• - For drafts: We review language, accuracy, tone
• - For research: We verify sources cited by AI
• DOCUMENTATION: We record our process
• - In our project files, we keep: original prompt, AI output, verification notes
• - We note what we changed and why
• - We record who reviewed and approved
• ESCALATION: When unsure, we ask
• - If uncertain about accuracy: escalate for expert review
• - If using restricted data: escalate for approval
• - If policy classification is unclear: escalate for guidance
• REVIEW: We review each other's AI-assisted work
• - Policy and procedure drafts are reviewed by at least one peer
• - Risk assessments and analyses get expert validation
• - Research syntheses get spot-check verification by someone else
• LEARNING: We share what we learn
• - If we find an AI error: we discuss it as a team
• - If we discover best practices: we share them
• - We refine our process quarterly based on experience

Our Goal: AI makes us faster and more thoughtful, but human judgment remains central. ```

How This Works in Practice: When a team member uses AI for a task, they know the team standard. The review standard is built in. Documentation is expected. Over time, these practices become team culture, not individual effort.

Example 3: Building Organizational AI Use Framework

Organization-Wide Standards:

``` ORGANIZATIONAL AI USE FRAMEWORK

LEVEL 1: ROUTINE USE (No Approval Required) Activities: Summarization, brainstorming, initial drafting, research support Standard Process: 1. Use approved AI tool 2. Verify key claims if needed 3. Document AI use 4. Internal review by peer 5. Use or finalize

Training: All staff (annual) Oversight: Manager spot-checks; audit review

----------------------------------------------------

LEVEL 2: SUPERVISED USE (Approval Required) Activities: Policy/procedure drafting, risk assessment, stakeholder analysis Standard Process: 1. Get pre-approval from compliance/subject matter expert 2. Use AI with pre-approved scope 3. Verify findings/content 4. Get post-approval from approver 5. Distribute or implement

Approval Authority: Compliance Officer, Department Head Training: Annual refresher for people doing Level 2 work Oversight: Documented approvals; audit review

----------------------------------------------------

LEVEL 3: RESTRICTED USE (Executive Approval Required) Activities: Regulatory interpretation, control design, external communications, sensitive decisions Standard Process: 1. Get executive pre-approval for use of AI in this context 2. Legal/expert review of approach 3. AI assists with research/drafting only; human makes all judgments 4. Executive approval of final decision/output 5. Documentation of expertise applied

Approval Authority: CFO, Chief Counsel, Chief Risk Officer Training: Case-by-case guidance Oversight: Executive review; audit review

----------------------------------------------------

PROHIBITED USE Activities: Legal advice, final control assessment, financial advice, personal/medical decisions Approach: Don't use AI; use human experts ```

How This Works in Practice: People in the organization know what level their task falls into. Each level has clear process, approval, and documentation standards. Oversight is built in at each level. Over time, the framework becomes part of how work is done.

Putting It Into Practice

At the Assisted Use level, implementation means beginning to incorporate these concepts into your supervised AI work:

• Practice with guidance: Use AI tools for low-stakes tasks with a mentor or supervisor available for review. Build confidence gradually before taking on more complex scenarios.
• Verify systematically: Develop a personal checklist for reviewing AI outputs. Even a simple three-point check (accuracy, completeness, appropriateness) dramatically improves output quality.
• Document your process: Record what AI tool you used, what prompt or input you provided, what output you received, and what verification steps you performed. This documentation habit is essential.
• Seek feedback: Share your AI-assisted work products with experienced colleagues. Their input helps calibrate your judgment about when AI outputs are reliable and when they require additional scrutiny.

Key Takeaways

Review the core concepts from this lesson and consider how each one applies to your professional practice.

As you continue through this credential program, you will build on the foundation established in this lesson. Each subsequent lesson adds new dimensions to your understanding and expands your capability to work effectively with AI in oversight roles.