Deploying GenAI solutions requires due diligence and planning, beginning with a governance framework that functions as a blueprint for continual evolution of risk management across an AI-dependent attack surface. The underpinning of such a framework must include operational and strategic considerations.