Most enterprises aren't organizationally structured to govern AI decisions with the rigor that regulators and counterparties are about to demand.