Audit Every Action: Every piece of data moving through an AI system should be logged, audited, and captured, according to McNeal. Identity must also be mapped and synchronized with enterprise access controls, so organizations can understand what an agent accessed, what it did, and why it did it.