Many organizations lack policies and training to address the risk of shadow IT, including GenAI.