> For the complete documentation index, see [llms.txt](https://handbook.harmonic.security/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://handbook.harmonic.security/handbook/7.-rollout-and-operations.md). # 7. Rollout & Operations How to deploy AI tools safely by risk phase, design pilots, measure adoption and control effectiveness, and maintain AI governance over time. *Last reviewed: August 18, 2026* {% hint style="info" %} How you deploy AI tools determines whether your controls actually apply to real users or only to a pilot group you forgot to widen. This section covers phased rollout, pilot design, evidence-backed approval, operational ownership, and safe exit when a tool, vendor, or workflow is retired. {% endhint %} ## Articles in this section 1. [7.1 Roll out by risk: the phased plan](/handbook/7.-rollout-and-operations/7.1-roll-out-by-risk-the-phased-plan.md) 2. [7.2 Pilot design and success metrics](/handbook/7.-rollout-and-operations/7.2-pilot-design-and-success-metrics.md) 3. [7.3 The security team checklist](/handbook/7.-rollout-and-operations/7.3-the-security-team-checklist.md) 4. [7.4 The vendor-neutral control matrix](/handbook/7.-rollout-and-operations/7.4-the-vendor-neutral-control-matrix.md) ## Frequently asked questions **What is the right order to deploy AI security controls?**\ Start with an inventory, an owner, a risk classification, and a managed-identity baseline. Configure data, tool, runtime, and logging controls before enabling high-risk capabilities, then pilot with a limited cohort and expand only after the evidence meets defined criteria. SSO and SCIM are important for managed seats, but they do not govern personal accounts, API keys, or every local agent. Pair identity controls with tenant, browser, endpoint, and developer controls, and do not leave observability until the end. **How do I know my AI security controls are actually working?**\ Use representative accounts, roles, devices, and product surfaces. Test both allowed and denied paths, including sign-in, paste or upload, tool calls, network access, approval prompts, log generation, and revocation. Record the expected and actual result for each test and require that evidence for the go or no-go decision. A control is not fully deployed until you have seen it apply to the intended identity and confirmed that the event reaches the expected investigation path. **How often should we review our AI security controls?**\ Use a risk-based cadence. Triage high-confidence alerts continuously or weekly, and review usage, access, and policy drift monthly. Revisit permissions, integrations, the threat model, and incident evidence at least quarterly for high-risk deployments. Red-team agent and tool paths before launch and again when material capabilities change. Trigger an out-of-cycle review after a major product release, new connector, model or tool enablement, control failure, or security incident. **What should an AI exit plan cover?**\ Define how to disable access, stop active work, revoke identities and connectors, transfer ownership, export required records, delete provider and downstream data, remove published artifacts, preserve investigation evidence, and confirm that billing and unattended tasks have ended. Test the disable path before production, not only during offboarding. ## Related handbook guidance * [AI Security Handbook](/ai-security-handbook.md) * [Security Team Checklist](/start-here/security-team-checklist.md) * [Governance & Frameworks](/reference/governance-and-frameworks.md) * [6.7 Continuous review cadence](/handbook/6.-observability-audit-and-evidence/6.7-continuous-review-cadence.md) --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://handbook.harmonic.security/handbook/7.-rollout-and-operations.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.