Claims Library Entry
Your company needs an AI policy and these 3 prompts will build one today
A governance workflow for turning the NIST AI RMF into practical AI policy drafts in under an hour.
Published March 2, 2026 by Kamil Banc
Lead claim
Three prompts can turn the NIST AI framework into five usable governance documents in one sitting
Atomic Claims
What this article supports
Copy individual claims as needed.
Claim 1
Unapproved AI use is normal
WalkMe and SAP found 78% of employees use AI tools their employer never approved
Claim 2
Company data already leaks
The same survey found 93% of employees paste company data into AI tools
Claim 3
Breaches cost materially more
IBM reported shadow AI breaches cost $670,000 more than standard incidents in 2025
Claim 4
Regulatory pressure is rising
U.S. states passed 145 AI-related laws in 2025, raising immediate governance pressure
Claim 5
Prompts compress policy work
The three-prompt workflow replaces a 6-12 week governance setup that often costs $10,000-$50,000
Evidence
Context behind the claims
Quote
"AI can write its own rulebook."
Key statistics
78%
Employees using AI tools their employer never approved
$670,000
Extra cost of shadow AI breaches versus standard incidents
145 laws
AI-related state laws passed across the United States in 2025
$20,000
Colorado AI Act penalty per violation when it takes effect on June 30, 2026
Supporting context
The governance argument is built on a widening confidence gap: employees already use AI heavily, often with company data, while most organizations still lack even basic responsible-AI controls. The post positions the NIST AI Risk Management Framework as the most pragmatic baseline because it is free, familiar to regulators, and explicitly referenced by state law safe-harbor language. Rather than asking readers to read the full framework, the article packages it into a three-prompt workflow that produces five first-draft governance artifacts. That makes policy creation accessible to operators and consultants without waiting for a full legal engagement.
How to Cite
Use the claim-level citation when you need a precise statement. Use the article or claims-collection citation when you want the wider argument and source context.
Individual Claim
Best when you need to cite one atomic claim directly inside a memo, deck, research note, or AI output.
"[claim text]" (Banc, Kamil, 2026, https://kbanc.com/claims-library/your-company-needs-an-ai-policy-and)Original Article
Use this when you want to cite the full newsletter article at AI Adopters Club rather than the structured claims page.
Banc, Kamil (2026, March 2, 2026). Your company needs an AI policy and these 3 prompts will build one today. AI Adopters Club. https://aiadopters.club/p/your-company-needs-an-ai-policy-andClaims Collection
Use this when you want to reference the full structured claims collection on this page.
Banc, Kamil (2026). Your company needs an AI policy and these 3 prompts will build one today [Structured Claims]. Retrieved from https://kbanc.com/claims-library/your-company-needs-an-ai-policy-andAttribution Requirements
- Include the author name: Kamil Banc.
- Include the source: AI Adopters Club or the structured claims page.
- Link to the original article or the claims page you used.
- Indicate any edits or transformations if you changed the wording.
Related Reading
More from the library
Take-Two Interactive's CEO publicly claims AI has "no creativity" while the company files patents for advanced AI systems. This dual narrative protects a $12.7 billion AI strategy that includes automated world-building, AI-driven QA, and player behavior prediction engines acquired through Zynga.
5 claims
A handful of schools split work between AI-automated delivery and human judgment, compressing core curriculum into two focused hours. The remaining time opened for projects and face-to-face coaching, with students hitting mastery targets faster while teachers tripled mentoring time.
5 claims
Most AI rollouts fail despite extensive training because the real issue isn't capability—it's habit formation. This article reveals why 42% of AI initiatives were abandoned in 2025 and shows how to redesign workflows so AI becomes the path of least resistance, creating automatic adoption without force.
5 claims