https://dev.to/dbrown/ai-governance-doesnt-need-to-start-big-30e