Last updated:
A time-limited governance initiative where employees are invited to disclose unsanctioned AI tool usage without fear of disciplinary action.
An amnesty program is used to establish a baseline AI inventory. By guaranteeing no negative consequences, the organization encourages honest reporting from departments that may have bypassed IT. This allows the governance team to identify high-value use cases, assess the true risk surface, and transition shadow tools into a formal management framework.
Real world example:
A CISO announces a 30-day AI Discovery Window, promising that any department declaring their use of specialized AI tools will receive help in securing them rather than being told to stop using them.
