How to operationalise AI compliance at scale — operating models, AI inventories, risk assessment, vendor controls, monitoring and board-ready evidence.