AI-1240 - USA (Wisconsin) - Develop A Comprehensive, Actionable Comprehensive Artificial Intelligence (AI) Use and Governance Policy Service - Deadline October 16,2026

(1) Vendor needs to provide develop a comprehensive, actionable comprehensive artificial intelligence (ai) use and governance policy service.• The final policy must establish clear governance, operational risk tiers, and employee standards for various relevant forms of AI, including predictive, physical, agentic, diagnostic, and Operational AI.– Phase I: Discovery, Inventory, and Benchmarking• Shadow & Embedded AI Audit: Conduct a high–level inventory across departments to identify currently used or authorized AI tools, as well as hidden “embedded“ AI features within existing software–as–a–service (SaaS) platforms.• Stakeholder Engagement: Conduct interviews with executive leadership, IT, legal counsel, and department heads, alongside staff workshops to evaluate the current baseline of AI literacy and employee expectations.• Utility Benchmarking: Provide a comparative analysis of best practices, case studies, and frameworks utilized by similar municipal governments, clean water utilities, or public infrastructure entities.– Phase II: Governance and Risk Framework Development• Risk Tiering System: Develop a risk–classification matrix (e.g., Low, Medium, High Risk) modelled after the agency AI Risk Management Framework (RMF) to categorize use cases based on data sensitivity and operational impact.• Human–in–the–Loop Safeguards: Establish technical and operational mandates for human auditing, validation of AI outputs, and clear accountability boundaries.– Phase III: Data Privacy, Security, and Compliance• Data Sovereignty & Security Guardrails: Define strict parameters preventing the input of proprietary, sensitive utility data, or personally identifiable information (PII) into unapproved, public AI platforms.• Public Records & Records Retention Integration: Map out clear guidelines for how AI–generated content, prompts, and training data interact with Wisconsin state and municipal records retention requirements.• Vendor Risk Protocols: Outline security and privacy procurement standards for evaluating third–party vendor software with embedded AI components.(2) The contract period will be for one year.(3) All the questions must be submitted no later than September 28, 2026.