← Findings 🕐 8 min read
Findings

What Do I Do Monday Morning? Three Actions for Your First Week

These apply to every person in the room, regardless of title.


Executive Summary

  • The 5% of companies capturing real AI value do not start with a strategy deck. They start with three actions in the first five business days: name a sponsor, audit what already exists, and write a two-page policy.
  • This card distills 247 research documents and the evidence from McKinsey (n=1,993), Pertama Partners (n=2,400+), and BCG (n=10,600) into role-specific first steps that fit on a printed page.
  • Every action on this card can be completed by the person reading it without a budget request, a committee, or a vendor conversation.

The Universal Three (Every Executive, Every Role)

These apply to every person in the room, regardless of title.

Day Action Why It Matters Done When
Monday Name one person who owns AI outcomes. Not a committee. Not “IT.” One name, announced to leadership. Projects with sustained C-level sponsorship achieve 68% success vs. 11% without (Pertama Partners, n=2,400+, 2026). The single biggest predictor of whether this works. An email goes out with a name and a mandate.
Tuesday–Wednesday Run the shadow AI audit. Start with three steps: search expense reports for $10-50/month AI subscriptions, pull OAuth consent logs from your identity provider, send a 5-question anonymous survey asking employees what they use. 78% of employees already use unapproved AI tools (WalkMe, n=1,000, 2025). 82% paste company data through personal accounts (LayerX, 2025). The audit reveals 3-5x expected tool footprint. A spreadsheet listing every AI tool, who uses it, and what data it touches.
Thursday–Friday Write a two-page AI acceptable use policy. Four sections: approved tools (by name), data rules (what cannot go into AI), human review requirement (all client-facing output), incident contact (one phone number). 63% of organizations have no AI governance policy (IBM, n=604, 2025). Shadow AI breaches cost $670K more per incident. The policy takes two hours to draft and prevents the catastrophic failure modes. A document reviewed by counsel and distributed to all employees.

Your Role-Specific Actions

After the universal three, each role has one additional action for the first week that no one else in the organization will do.

CEO / President

Your action: Send a 4-sentence all-staff message by Friday.

The message: (1) “We are evaluating AI for specific workflows.” (2) “[Name] owns this.” (3) “There are no planned layoffs related to AI.” (4) “We will share what we learn in 30 days.”

Why you: 53% of employees fear using AI signals replaceability (BCG, n=10,635, 2025). 62% say leaders underestimate the emotional impact (Mercer, n=4,500, 2025). The CEO’s silence is interpreted as planning cuts. Four sentences prevent six months of anxiety and sabotage — 31% of employees actively sabotage AI initiatives they fear threaten their roles (Writer/Workplace Intelligence, n=1,600, 2025).

CFO / Finance Leader

Your action: Build the real cost estimate before anyone approves a purchase order.

Pull the total: license fees ($19-50/seat/month) represent 10-20% of actual cost. The remaining 80-90% sits in debugging, review overhead, training, and governance. Year 1 total cost runs roughly 2.5x the license (DX Research/Atlan, 2025). Budget for the full number or the program dies at the first quarterly review.

Why you: 14% of CFOs see measurable AI ROI (RGP, n=200, 2025). The 86% who don’t budgeted for the license, not the initiative. BCG’s 10-20-70 rule: 10% of investment on the tool, 20% on technology, 70% on people and process.

CIO / IT Leader

Your action: Complete a technical inventory of AI touchpoints by Friday.

Three questions: (1) Which AI features are already active in tools you pay for? (M365 Copilot, Salesforce Einstein, Google Gemini in Workspace — many auto-activate.) (2) What OAuth tokens have employees granted to AI applications? (3) What API traffic is flowing to AI endpoints from your network?

Why you: 80% of employees at mid-market companies bring their own AI tools (Microsoft Work Trend Index, 2025). 269 unauthorized AI tools per 1,000 employees on average (Reco, n=50+ enterprises, 2025). The CIO discovers the real AI footprint — not the one on the procurement list.

COO / Operations Leader

Your action: Pick one workflow for the first pilot — not three, not five.

Score candidates on five criteria: volume (50+ instances/week), measurability (time per unit, error rate), data availability (digital inputs exist), error cost (low enough to tolerate learning curves), and complexity (5-15 steps, 1-2 handoffs). The best first pilots are boring: invoice processing, customer inquiry triage, document routing. Avoid client-facing and multi-department processes.

Why you: High performers are 2.8x more likely to have redesigned the specific workflow AI touches (McKinsey, n=1,993, 2025). Only 5% of organizations capture substantial AI value (BCG, n=10,600, 2025) — most fail because they targeted the wrong process or too many at once.

GC / General Counsel

Your action: Flag the three legal exposures that exist right now, before any formal AI program starts.

(1) Data exposure: If employees paste client data into personal AI accounts, attorney-client privilege may already be compromised. Document the risk and the remediation timeline. (2) Regulatory calendar: EU AI Act high-risk obligations take effect August 2, 2026. Colorado AI Act: June 2026. Five state-level AI employment laws are live in 2026. (3) IP and liability: Review vendor terms for any AI tool employees already use — most free-tier terms grant the vendor broad rights to training data.

Why you: Stanford’s peer-reviewed study finds legal AI tools hallucinate 17-34% of the time. 225,000+ OpenAI credentials with full chat histories were found on dark web markets in 2025. The legal exposure already exists — it is not waiting for a formal program.

CHRO / HR Leader

Your action: Draft the internal FAQ that answers the question every employee is already asking: “Will AI take my job?”

Three facts to include: (1) Among companies with AI productivity gains, only 17% reduced headcount — 83% reinvested in growth and upskilling (EY, n=500, 2025). (2) IKEA reskilled 8,500 displaced workers into higher-value roles and generated $1.4B in new revenue. (3) 63% of employees would trade a 10% raise for AI upskilling opportunities (PwC, ~1B job ads analyzed, 2025). Lead with the redeployment data. Address the fear directly. Do not pretend it does not exist.

Why you: AI job-loss fear jumped from 28% to 40% in two years (Mercer, n=4,500, 2025). 93% of Fortune 1000 executives cite culture and change management as their primary AI implementation challenge (HBR, n=100+, 2026). The CHRO either leads this conversation or it happens in Slack channels without data.


Key Data Points

Metric Finding Source
Organizations capturing substantial AI value Only 5% BCG, n=10,600, 2025
Success with C-level sponsor vs. without 68% vs. 11% Pertama Partners, n=2,400+, 2026
Employees using unapproved AI tools 78% WalkMe/Propeller Insights, n=1,000, 2025
True cost vs. license fee 2.5x Year 1 (license = 10-20% of total) DX Research/Atlan, 2025
Organizations with no AI governance policy 63% IBM, n=604, 2025
Shadow AI breach cost premium +$670K per incident IBM, n=604, 2025
Companies with AI gains that cut headcount 17% (83% reinvested) EY, n=500, 2025
Success rate with pre-defined metrics 54% vs. 12% without Pertama Partners, n=2,400+, 2026

What This Means for Your Organization

The gap between attending a briefing about AI and doing something about it is where most initiatives die. Not dramatically — quietly. The executive returns to a full inbox, the momentum fades, and six months later someone asks “whatever happened with the AI thing?”

This card exists to prevent that outcome. Every action on it can be started Monday and completed by Friday. None require a budget. None require a vendor. None require consensus beyond the person reading the card. The evidence is clear on what separates the 5% from the 95%: the 5% did something in the first week. The 95% scheduled a meeting to discuss doing something.

If this card raised questions about which workflow to select, how to structure the sponsor role, or how the shadow AI audit applies to your specific organization — that conversation is worth having. brandon@brandonsneider.com.

Sources

  1. Pertama Partners — n=2,400+ AI initiatives, 2025-2026. C-level sponsorship and success metrics impact data. Independent. High credibility. https://www.pertamapartners.com/insights/ai-project-failure-statistics-2026
  2. BCG — “AI at Work 2025.” n=10,600+ workers, 11 countries. Only 5% achieving substantial AI returns. Independent survey. High credibility. https://www.bcg.com/publications/2025/ai-at-work-momentum-builds-but-gaps-remain
  3. McKinsey — “The State of AI in 2025.” n=1,993. June-July 2025. Workflow redesign 2.8x finding. Independent survey. High credibility. https://www.mckinsey.com/capabilities/quantumblack/our-insights/the-state-of-ai
  4. WalkMe/Propeller Insights — Shadow AI survey. n=1,000 U.S. workers, July 2025. ±3% margin of error. Independent polling. High credibility. https://news.sap.com/2025/08/new-walkme-survey-shadow-ai-rampant-training-gaps-undermine-roi/
  5. LayerX — Enterprise AI & SaaS Data Security Report. October 2025. Browser telemetry, not self-report. Independent security vendor. High credibility. https://layerxsecurity.com/blog/layerxs-enterprise-genai-security-report-2025-exposing-hidden-ai-security-blind-spots/
  6. IBM — Cost of a Data Breach 2025. n=604 organizations, 17 countries. Gold standard for breach cost data. https://www.ibm.com/reports/data-breach
  7. BCG — “From Potential to Profit.” n=1,250+, 2025. 10-20-70 budget framework. Consulting survey. Moderate-high credibility. https://www.bcg.com/publications/2025/closing-the-ai-impact-gap
  8. BCG — “AI at Work.” n=10,635 employees, June 2025. Employee sentiment and sabotage data. Consulting survey. Moderate-high credibility. https://www.bcg.com/publications/2025/ai-at-work-momentum-builds-but-gaps-remain
  9. EY — AI Pulse Survey. n=500 SVP+ leaders, October 2025. Headcount data. Consulting survey. Moderate credibility.
  10. Mercer — “Inside Employees’ Minds.” n=4,500, September-October 2025. Job-loss fear data. Independent survey. High credibility.
  11. Writer/Workplace Intelligence — n=1,600, March 2025. Sabotage data (31%). Vendor-commissioned. Moderate credibility. https://writer.com/resources/ai-at-work-research/
  12. HBR — AI & Data Leadership Executive Benchmark Survey. n=100+ Fortune 1000 executives, January 2026. Culture as primary barrier (93%). Independent. High credibility.
  13. RGP — n=200 CFOs, October-November 2025. 14% ROI visibility. Independent survey. Moderate credibility.
  14. DX Research/Atlan — Year 1 TCO analysis. License fees = 10-20% of total. 2.5x Year 1 multiplier. Independent. High credibility.
  15. Reco — 2025 State of Shadow AI Report. n=50+ enterprises, 55,000+ apps. 269 tools/1,000 employees. Vendor-funded telemetry. Moderate credibility. https://www.reco.ai/state-of-shadow-ai-report
  16. PwC — Global AI Jobs Barometer. ~1B job ads analyzed, June 2025. Upskilling demand data. Independent analysis. High credibility.
  17. Microsoft — Work Trend Index 2025. BYOAI rates. Vendor interest in selling Copilot. Moderate-high credibility. https://www.microsoft.com/en-us/worklab/

Brandon Sneider | brandon@brandonsneider.com March 2026