01 / The prompt begins
Employee
- Illustrative event
- An employee opens an AI assistant that has not been reviewed and pastes part of an internal project brief.
- Why it matters
- The interaction can sit outside the approved inventory, leaving security without a reliable record of the tool or data involved.
- Visibility or response
- Associate the activity with the user, device, application, and prompt context so shadow use can be reviewed.




