---
title: "Your company needs an AI policy and these 3 prompts will build one today"
description: "5 source-backed AI claims from Your company needs an AI policy and these 3 prompts will build one today, with key statistics, context, and the original AI…"
url: "https://kbanc.com/claims-library/your-company-needs-an-ai-policy-and"
source: "https://aiadopters.club/p/your-company-needs-an-ai-policy-and"
date: "2026-03-02"
topics: ["implementation", "strategy", "business"]
generated: "2026-09-19"
---

# Your company needs an AI policy and these 3 prompts will build one today

By Kamil Banc | March 2, 2026

## Claims

1. **Unapproved AI use is normal**: WalkMe and SAP found 78% of employees use AI tools their employer never approved
2. **Company data already leaks**: The same survey found 93% of employees paste company data into AI tools
3. **Breaches cost materially more**: IBM reported shadow AI breaches cost $670,000 more than standard incidents in 2025
4. **Regulatory pressure is rising**: U.S. states passed 145 AI-related laws in 2025, raising immediate governance pressure
5. **Prompts compress policy work**: The three-prompt workflow replaces a 6-12 week governance setup that often costs $10,000-$50,000

## Evidence

### Quote
> "AI can write its own rulebook." - Kamil Banc

### Key Statistics
- **78%**: Employees using AI tools their employer never approved
- **$670,000**: Extra cost of shadow AI breaches versus standard incidents
- **145 laws**: AI-related state laws passed across the United States in 2025
- **$20,000**: Colorado AI Act penalty per violation when it takes effect on June 30, 2026

## Context
The governance argument is built on a widening confidence gap: employees already use AI heavily, often with company data, while most organizations still lack even basic responsible-AI controls. The post positions the NIST AI Risk Management Framework as the most pragmatic baseline because it is free, familiar to regulators, and explicitly referenced by state law safe-harbor language. Rather than asking readers to read the full framework, the article packages it into a three-prompt workflow that produces five first-draft governance artifacts. That makes policy creation accessible to operators and consultants without waiting for a full legal engagement.

## Source
- Original: [Your company needs an AI policy and these 3 prompts will build one today](https://aiadopters.club/p/your-company-needs-an-ai-policy-and)
- Cite: kbanc.com/claims-library/your-company-needs-an-ai-policy-and