You can enter from either side of the problem.
Sometimes the concern begins with software: an AI-built application, a legacy system, an acquisition, a critical internal tool, or a development team accumulating risk. Sometimes it begins with people: unclear AI use, inconsistent expectations, weak ownership, governance questions, or a leadership team trying to understand what is changing.