AI and Automation Workbook

 

You do not need to be technical to complete it. You do need visibility, ownership, and clear leadership intent. 

AI is already being used across organizations, often informally, inconsistently, and without clear oversight. The workbook helps you identify where it's in use, understand how and why, surface the risks and inefficiencies, and begin establishing responsible governance. Here's what's included:

  • Spot the tools: Four common categories of AI tools employees use today, from chat and research to coding, and why each one matters.
  • Check your risk: A seven-statement AI Risk & Readiness Checklist that ends in a risk score.
  • Map who's using what: A team-by-team table of tools, use cases, data sensitivity, and approval status. Unsure? That's a signal, not a failure.
  • Weigh the value: Which tools your teams prefer, where AI replaces vs. enhances, pros and cons by platform, and a Venn diagram to find your best starting points.
  • See actual use: How your IT team or technology partner can pull real usage from web filtering, firewall logs, Microsoft 365 or Google Workspace, and endpoint tools.
  • Take ownership: Write your own AI leadership statement, then work through five next steps with your department leaders.

Get started on the right path to automation. Fill out the form below to get the AI workbook sent right to your inbox!

Good governance shouldn't stand in the way of innovation. It should make innovation possible.

Want extra eyes on your audit? InnoTek works with leadership teams to assess current AI usage, reduce risk, and establish practical AI governance that supports growth, security, and accountability. Book a free, no-obligation consultation to learn how to get AI implemented into your business.

Start the conversation

AI is a weapon. It's also a target.

The tools you adopt become part of what needs protecting. Not a reason to panic. A reason to be deliberate. Here are some numbers you should be aware of:

89%

Increase in activity by attackers using AI in a single year.

29

Average time (in minutes) from first break-in to the attacker reaching a second system.

90+

Organizations where attackers manipulated legitimate AI tools into running malicious commands and stealing sensitive data

*Source: CrowdStrike 2026 Global Threat Report. Reported observations, not universal rates.

1 in 3 | 70%

In one 2025 survey of manufacturing professionals, only a third said their company has clear AI policies. 70% want them.

*Source: ManageEngine survey, reported by Manufacturing.net, 2025.

Five steps to say yes responsibly

Lots of opportunity: less repetitive admin work, faster access to what your people already know, more output without adding headcount. This is how you get there safely. 

  • Discover: See where AI is already in use.
  • Define: Decide what's allowed and who's accountable.
  • Protect: Control access, data, and what AI can touch.
  • Educate: Teach people to use it well and spot scams.
  • Improve: Start small, measure, and adjust.

Frequently Asked Questions

Do I need to be technical to use the workbook?

No. You do need visibility, ownership, and clear leadership intent, but nothing in it requires a technical background. Where the answer lives in your systems, like which AI tools are actually being accessed, your internal IT team or technology partner can pull the reports for you. 

How do we find out what AI our people are actually using?

Most organizations already have more visibility than they realize. Web filtering and DNS reporting, firewall and secure web gateway logs, Microsoft 365 or Google Workspace activity, and endpoint and browser management tools can show which AI tools are accessed, how often, and where usage is trending across teams. Not sure who to ask? Call us. 

We're a small shop. Do we really need an AI policy?

If anyone on your team uses AI, yes. Governance is just who decides which AI gets used, what company information it can touch, and who's accountable. It doesn't take a binder. The goal is one page people will actually follow: which tools are approved, what data goes where, check anything AI produces, who approves a new tool, and how to report a mistake without blame. 

Isn't the real risk employees doing something reckless?

Usually it's the opposite: your best employee, doing exactly what you hired them to do. AI is fast, it's free on a personal account, and nobody told them where the line is. They're not the problem. The missing answer is. 

What's the difference between a chatbot and an AI agent?

A chatbot drafts the email and you decide whether to send it. An agent reads your files, sends the email, and changes the record. Before you connect one, ask what it can read, change, send, or delete, and who approves that. 

How do we know what data is safe to put into AI tools?

Sort it. Red data (customer NDA material, controlled defense information, regulated personal data, proprietary processes) stays out of any AI tool without explicit approval. Yellow (internal documents and pricing) goes to company-managed tools only. Green (public and marketing content) can go to any approved tool. When in doubt, treat it as red.