Identify and contain
Record what happened, what was affected and what action stopped further exposure.
A selected incident and corrective-action record can show that the organization identified an AI-related problem, contained it, reviewed the cause and changed training, policy or controls where appropriate.
Issue: Unverified AI-generated grant statement entered a draft member communication.
Containment: Publication stopped before release.
Correction: Verification workflow reinforced; refresher assigned.
Record what happened, what was affected and what action stopped further exposure.
Was the issue knowledge, policy, human oversight, tool configuration, vendor behaviour or a workflow gap?
Update training, policy, role assignment or process and preserve evidence of the corrective action.
No system prevents every error. A credible governance program should be able to show that incidents trigger review and proportionate improvement rather than disappearing into an undocumented exception.