Governance by design: Turning AI policy into executable controls InfoWorld