The silent risk layer in enterprise AI: Governing data exposure in the age of generative AI IBM